Privacy Policy — How ku8 Protects Your Personal Data

1. Data Controller

1.1 For the purposes of this Privacy Policy, "ku8", "we", "us", and "our" refer to the operator of the online gaming platform accessible at https://ku8.bio and all associated sub-domains and mobile web applications (the "Platform").

1.2 ku8 is the data controller in respect of personal information collected from players who register accounts and use the Platform. As data controller, ku8 determines the purposes and means of processing your personal data in accordance with this Privacy Policy.

1.3 If you have any questions, concerns, or requests relating to this Privacy Policy or to the manner in which ku8 handles your personal data, you may contact our Data Protection team at: [email protected]. We will endeavour to respond to all privacy-related enquiries within five (5) business days.

1.4 This Privacy Policy applies to all registered players, prospective players who have submitted registration information, and visitors who interact with the Platform, regardless of the device or browser used to access it.

1.5 This Privacy Policy should be read alongside our Terms & Conditions, which govern the overall relationship between you and ku8. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a privacy-specific matter, this Privacy Policy shall prevail.

2. Information We Collect

ku8 collects personal data through several channels: directly from you when you register or use the Platform, automatically as you interact with the Platform, and — in limited circumstances — from third-party verification and payment service providers. The categories of data we collect are set out below.

2.1 Registration Data

When you create a ku8 account, we collect the following information:

• Mobile phone number (used as your primary account identifier and for SMS verification);
• Date of birth (used to verify that you meet the 18+ age requirement);
• Account username and encrypted password;
• Preferred currency (BDT is the default and only supported currency for Bangladesh players).

2.2 Identity Verification (KYC) Data

When we are required to verify your identity — either as part of routine Know Your Customer (KYC) procedures or in connection with a withdrawal request — we may collect:

• A copy of a government-issued photo identification document (National ID Card, Passport, or Birth Certificate);
• Proof of ownership of the payment method used for deposits (e.g., a screenshot of your bKash or Nagad account registered to your mobile number);
• A utility bill, bank statement, or other official document confirming your residential address in Bangladesh (dated within three months).

2.3 Financial Transaction Data

We collect records of all financial transactions processed through your ku8 account, including deposit amounts and timestamps, withdrawal requests and processing status, payment method identifiers (e.g., the last four digits of a registered mobile wallet number), and bonus credits and wagering activity. We do not store full payment credentials — bKash, Nagad, Rocket, and bank transfer transactions are processed through the respective payment provider's own secure gateway.

2.4 Gaming Activity Data

We collect detailed records of your gaming sessions on the ku8 platform, including game titles played, bet amounts, win and loss records, session start and end times (recorded in Bangladesh Standard Time, UTC+6), and device type used per session. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform improvement purposes.

2.5 Technical and Device Data

When you access the Platform, our servers automatically collect certain technical information, including your IP address, browser type and version, operating system, device model, screen resolution, referring URL, and pages visited within the Platform. This information is collected to maintain platform security, prevent fraud, and improve the user experience.

2.6 Communications Data

If you contact our customer support team via email or any in-platform messaging tool, we retain a record of that correspondence, including the content of messages and any attachments, for quality assurance, training, and dispute resolution purposes.

3. How We Use Your Data

ku8 processes your personal data only for lawful purposes and only to the extent necessary to fulfil those purposes. The primary purposes for which we use your data are summarised in the table below.

3.1 Marketing Communications

ku8 may send you promotional messages, bonus offers, and platform updates via SMS or email to the contact details you provided at registration. You may opt out of marketing communications at any time by updating your preferences in the account settings panel or by contacting [email protected]. Opting out of marketing will not affect transactional messages, such as deposit confirmations, withdrawal notifications, or security alerts, which are sent as a necessary part of operating your account.

3.2 Automated Decision-Making

ku8 uses automated systems to assist in fraud detection, responsible gaming monitoring, and promotional eligibility assessments. Where an automated decision significantly affects your account (for example, a suspension triggered by a fraud detection alert), you have the right to request a manual review of that decision by contacting [email protected].

4. Data Sharing & Disclosure

ku8 does not sell or rent your personal data to any third party. We may share your data with the following categories of recipient only to the extent necessary and only for the purposes described in this Privacy Policy:

4.1 Payment Service Providers

In order to process your deposits and withdrawals, ku8 shares transaction-related information with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. The data shared is limited to what is strictly required to authenticate and complete the transaction. Each payment provider operates under its own privacy policy and data protection obligations.

4.2 Identity Verification Partners

ku8 may use third-party identity verification services to assist with KYC checks. These providers process the identity documents you submit solely for the purpose of verifying your identity and age and are contractually prohibited from using your data for any other purpose.

4.3 Technology and Hosting Providers

ku8 uses third-party cloud hosting, infrastructure, and software providers to operate the Platform. These providers act as data processors on our behalf and may have access to personal data only to the extent required to deliver their contracted services. All such providers are bound by data processing agreements that restrict their use of your data to the purposes we specify.

4.4 Game Software Providers

The casino games and sports betting interfaces available on the ku8 platform are powered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. These providers may receive session-level data (such as game session identifiers and bet amounts) for the purpose of delivering game content and resolving game-level disputes. They do not receive your name, contact details, or payment information.

4.5 Legal and Regulatory Disclosure

ku8 may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or in connection with an investigation into suspected fraud, money laundering, or other illegal activity. In such cases, ku8 will disclose only the minimum data necessary to satisfy the legal requirement.

4.6 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of ku8's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to this Privacy Policy that results from it.

5. Cookies & Tracking Technologies

The ku8 Platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. A cookie is a small text file placed on your device when you visit a website. The cookies we use fall into the following categories:

5.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They maintain your login session, remember your account preferences during a session, and enable core security features such as CSRF protection. You cannot opt out of strictly necessary cookies without disabling your ability to use the Platform.

5.2 Performance and Analytics Cookies

These cookies collect anonymised or aggregated data about how players navigate the Platform — for example, which pages are visited most frequently and where users encounter errors. This information helps us identify and fix technical issues and improve the overall player experience. The data collected by these cookies does not identify you personally.

5.3 Functional Cookies

Functional cookies remember choices you make, such as your preferred language or the last game category you browsed, so that the Platform can provide a more personalised experience on subsequent visits. These cookies do not track your activity on third-party websites.

5.4 Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and receive a notification when a new cookie is set. Please note that disabling certain cookies may affect the functionality of the Platform. For detailed guidance on managing cookies in your specific browser, refer to your browser provider's help documentation.

6. Data Retention

6.1 ku8 retains your personal data for as long as your account remains active and for a reasonable period thereafter, as set out below. Retention periods are determined by the nature of the data and the purpose for which it was collected.

6.2 Account registration data and KYC documents are retained for the lifetime of your account and for a period of five (5) years following permanent account closure, in order to comply with anti-money-laundering record-keeping obligations and to respond to any disputes or legal claims that may arise after closure.

6.3 Financial transaction records, including deposit and withdrawal history, are retained for a minimum of five (5) years from the date of each transaction in accordance with applicable financial record-keeping requirements.

6.4 Gaming activity logs are retained for three (3) years from the date of the relevant gaming session. Anonymised or aggregated gaming analytics data, which cannot be used to identify you, may be retained indefinitely for platform improvement purposes.

6.5 Customer support correspondence is retained for three (3) years from the date of the last message in the relevant thread, except where the correspondence relates to a dispute or legal claim, in which case it is retained until the matter is fully resolved.

6.6 Where you have opted in to marketing communications, we retain your marketing preferences and associated contact data until you withdraw your consent or until your account is closed, whichever is earlier.

6.7 Following the expiry of the applicable retention period, ku8 will securely delete or anonymise your personal data. You may request early deletion of your data, subject to the limitations described in Section 8 of this Policy.

7. Data Security

7.1 ku8 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and the Platform;
• Encryption of sensitive data at rest, including stored KYC documents and payment identifiers;
• Role-based access controls that restrict internal access to personal data to authorised personnel who require it for their specific job functions;
• Regular security assessments, vulnerability scanning, and penetration testing of Platform infrastructure;
• Two-factor authentication (2FA) options available to all registered players to protect their accounts from unauthorised login;
• Automated fraud detection systems that monitor for suspicious account activity in real time.

7.2 While ku8 takes all reasonable steps to protect your data, no method of internet transmission or electronic storage is completely secure. ku8 cannot guarantee the absolute security of data transmitted to or from the Platform, and you accept that you transmit data at your own risk. We encourage you to use a strong, unique password for your ku8 account and to enable two-factor authentication where possible.

7.3 In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, ku8 will notify affected individuals without undue delay and will take all reasonable steps to contain and remediate the breach. A record of all data breaches, including those not meeting the notification threshold, is maintained internally.

8. Your Privacy Rights

As a data subject, you hold the following rights in respect of the personal data that ku8 holds about you. To exercise any of these rights, please contact [email protected] with the subject line "Privacy Rights Request". We will respond within five (5) business days and will action valid requests within thirty (30) calendar days of receipt.

8.1 Right of Access

You have the right to request a copy of the personal data that ku8 holds about you. We will provide this in a structured, commonly used format. The first copy is provided at no charge; further copies may be subject to a reasonable administrative fee.

8.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You may update certain account details directly from your account settings panel without contacting support.

8.3 Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other lawful basis applies), or where the data has been unlawfully processed. Please note that ku8 may be required to retain certain data for legal or regulatory compliance reasons, in which case we will inform you of the extent to which your erasure request can be fulfilled.

8.4 Right to Restrict Processing

You have the right to request that ku8 suspend processing of your personal data in certain circumstances — for example, while a data accuracy dispute is being resolved. During any period of restricted processing, ku8 will not use the affected data except for storage and the resolution of the relevant dispute.

8.5 Right to Data Portability

Where ku8 processes your personal data based on your consent or on the basis of contractual necessity, and that processing is carried out by automated means, you have the right to receive a structured, machine-readable copy of your data and to request that it be transmitted directly to another data controller where technically feasible.

8.6 Right to Object

You have the right to object at any time to the processing of your personal data for direct marketing purposes. You also have the right to object to processing carried out on the basis of ku8's legitimate interests, although in such cases ku8 may continue processing if it can demonstrate compelling legitimate grounds that override your interests.

8.7 Right to Withdraw Consent

Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw consent for marketing, update your preferences in the account settings panel or contact [email protected].