ku09 Privacy Policy

Overview

This Privacy Policy ("Policy") describes how ku09 ("ku09", "we", "us", "our") collects, uses, stores, shares, and protects personal information relating to individuals ("you", "Player", "User") who access or use the ku09 online casino and sports betting platform available at https://ku09.io and its associated mobile interfaces and subdomains (collectively, the "Platform").

By registering an account on, or otherwise using, the ku09 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the Platform.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are available on the Platform and together form the full agreement governing your use of ku09 services.

Data Controller

For the purposes of applicable data protection law, ku09 acts as the data controller in respect of the personal information it collects from players and visitors to the Platform. As data controller, ku09 determines the purposes and means of processing personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

All data protection enquiries, subject access requests, and requests to exercise your rights under this Policy should be directed to our support team at [email protected]. We will acknowledge all data-related requests within 72 hours and aim to respond fully within 14 calendar days.

Data We Collect

ku09 collects personal data in the categories described below. We only collect data that is necessary and proportionate to the purposes for which it is used.

3.1 Identity & Contact Data

• Full legal name
• Date of birth
• Gender (where voluntarily provided)
• Residential address
• Email address
• Mobile phone number
• Copies of government-issued identity documents (e.g., National ID card, passport) submitted during KYC verification

3.2 Financial Data

• Payment method details (e.g., bKash account number, Nagad mobile number, Rocket account reference, Upay account number, Visa/Mastercard card details)
• Transaction history — deposits, withdrawals, and adjustments
• Account balance information
• Bank account details where bank transfer is used

3.3 Account & Gaming Activity Data

• Username and encrypted password
• Login history, session timestamps, and session durations
• Betting and gaming history — games played, bet amounts, outcomes, bonus usage
• Responsible gaming settings (deposit limits, self-exclusion status, cooling-off periods)
• Correspondence with our support team

3.4 Technical & Device Data

• IP address
• Device type, operating system, and browser type/version
• Unique device identifiers
• Referring URL and on-site navigation path
• Geolocation data (country and city level, derived from IP address)

How We Collect Data

ku09 collects personal data through the following channels:

4.1 Directly From You

When you register an account, complete the KYC verification process, make a deposit or withdrawal, contact our support team, participate in a promotion, or otherwise interact with the Platform, you directly provide us with personal data.

4.2 Automatically Through Platform Use

When you access and use the Platform, we automatically collect certain technical and usage data through cookies, log files, and similar tracking technologies. This data helps us maintain Platform security, analyse performance, and improve the user experience. See Section 11 for full details on our use of cookies.

4.3 From Third-Party Service Providers

We may receive personal data from third-party identity verification providers (for KYC purposes), payment processors, fraud detection services, and game content suppliers where this is necessary to deliver our services, verify your identity, or comply with legal obligations. Any data received from third parties is handled in accordance with this Policy.

How We Use Your Data

The table below summarises the key purposes for which ku09 uses your personal data and the corresponding legal basis for each use.

Legal Basis for Processing

ku09 processes personal data on one or more of the following legal grounds:

• Contract Performance: Processing is necessary to fulfil our contractual obligations to you as a registered player, including account management, payments, and game delivery.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, know-your-customer (KYC) obligations, and responsible gaming legislation.
• Legitimate Interests: Processing is necessary for ku09's legitimate business interests, including fraud prevention, Platform security, and service improvement, where those interests are not overridden by your rights.
• Consent: For certain non-essential processing activities, such as sending you promotional communications, we rely on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing

ku09 does not sell your personal data to third parties. We may share your data only in the limited circumstances described below, and always subject to appropriate data protection safeguards.

7.1 Service Providers

We share personal data with trusted third-party service providers who assist us in operating the Platform. These include payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank), identity verification providers, cloud hosting services, and analytics platforms. All service providers are contractually required to process data only on our instructions and in accordance with applicable data protection law.

7.2 Game Content Suppliers

Game outcomes and session data may be shared with our licensed game suppliers — including Pragmatic Play, NetEnt, Microgaming, Evolution Gaming, Spribe, and Ezugi — to the extent necessary for game delivery, dispute resolution, and RTP auditing. These providers operate under their own data protection frameworks and are independently certified by gaming regulators.

7.3 Legal and Regulatory Disclosures

ku09 may disclose personal data to law enforcement agencies, financial intelligence units, courts, or other competent authorities where required by law, legal process, or binding governmental order. We will, where legally permitted, notify you of such disclosure requests before complying.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of ku09's business, personal data held by ku09 may be transferred to the acquiring entity. In such circumstances, ku09 will ensure that appropriate data protection obligations are imposed on the recipient and that you are notified of any material change in data controller before the transfer takes effect.

International Data Transfers

Some of our third-party service providers and game content suppliers operate from locations outside Bangladesh. Where personal data is transferred to a country that does not provide an equivalent level of data protection, ku09 implements appropriate safeguards to ensure your data remains protected. These safeguards may include standard contractual clauses, binding corporate rules, or reliance on the recipient country's adequacy status under applicable data protection frameworks.

By using the ku09 Platform, you acknowledge that your personal data may be processed in countries outside Bangladesh, subject always to the protections described in this Policy.

Data Retention

ku09 retains personal data for the periods set out below, after which data is securely deleted, anonymised, or archived in accordance with applicable legal requirements:

• Active account data: Retained for the lifetime of your account plus a minimum of 5 years following account closure, to comply with AML and financial record-keeping obligations.
• KYC and identity documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction.
• Customer support communications: Retained for 3 years from the date of the last interaction.
• Technical and device data (logs): Retained for up to 12 months, unless a longer period is required for security investigation purposes.
• Marketing consent records: Retained for the duration of your consent and for 2 years following withdrawal of consent, for compliance purposes.

Security Measures

ku09 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers
• Encryption of sensitive data at rest, including password hashes and financial identifiers
• Strict role-based access controls limiting staff access to personal data on a need-to-know basis
• Multi-factor authentication (MFA) enforced for all internal administrative access
• Continuous intrusion detection and security event monitoring
• Regular third-party security audits and penetration testing
• Documented incident response procedures with defined notification timelines

While ku09 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for notifying us immediately if you suspect any unauthorised access to your account.

Cookies & Tracking Technologies

11.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to remember your preferences, maintain your session, and gather usage analytics. ku09 uses cookies and similar tracking technologies to provide a functional, secure, and personalised Platform experience.

11.2 Types of Cookies We Use

11.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies, though disabling essential cookies may affect your ability to log in and use the Platform. Analytics cookies can be opted out of through your account preferences. ku09 does not use third-party advertising or cross-site tracking cookies.

Your Rights

Depending on applicable data protection law, you may have the following rights in respect of your personal data held by ku09:

• Right of Access: You may request a copy of the personal data ku09 holds about you, along with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. This right is subject to legal retention obligations described in Section 9.
• Right to Restrict Processing: You may request that we limit the way we process your personal data in certain circumstances, for example while a rectification request is pending.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request a machine-readable copy of your personal data to transfer to another service provider.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing. We will honour all valid marketing opt-out requests immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact our support team at [email protected] with your full name, registered email address, and a clear description of your request. We may need to verify your identity before processing any data rights request.

Protection of Minors

The ku09 Platform is strictly restricted to individuals aged 21 years or above. ku09 does not knowingly collect or process personal data from individuals under the age of 21. Age verification is carried out as part of the account registration and KYC process.

If we become aware that personal data has been collected from an individual under the age of 21, we will immediately close the associated account, delete all personal data relating to that individual to the extent permitted by law, and take appropriate remedial action.

Third-Party Links

The ku09 Platform may contain links to third-party websites, services, or resources (for example, payment provider portals or game supplier platforms). ku09 is not responsible for the privacy practices of those third parties, and this Policy does not apply to any third-party website or service. We encourage you to review the privacy policies of any third-party services you access through links on the Platform.

Policy Changes

ku09 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. Where changes are material, we will notify registered players by email and/or by posting a prominent notice on the Platform with a minimum of seven (7) days' advance notice before the changes take effect, where practicable.

The effective date of the most recent revision is always displayed at the top of this document. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must cease using the Platform and may request account closure as described in our Terms & Conditions.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ku09 handles your personal data, please reach our team using the details below:

• Data Protection Enquiries: [email protected]
• Support Hours: Available 24 hours a day, 7 days a week, in English
• Live Chat: Available directly on the Platform — typical response time under 5 minutes
• Postal Correspondence: Please include your registered email address and a clear subject reference on all written correspondence

All privacy-related communications must be sent from your registered email address so that we can verify your identity before processing any request. We will acknowledge receipt of your message within 72 hours and provide a full response within 14 calendar days.