ku89 Privacy Policy — How We Handle Your Data

01 Introduction

This Privacy Policy describes how ku89 ("we", "our", or "the Platform") collects, processes, stores, and protects the personal information of individuals who use the ku89 website at ku89.io and all associated services, including sports betting, live casino, slots, and account management functions.

ku89 serves English-speaking players throughout Bangladesh, including those based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. All data processed by ku89 in connection with our Bangladeshi player base is handled in accordance with recognised international data protection standards and with full respect for player privacy.

By registering for a ku89 account or by continuing to use the Platform after this policy has been brought to your attention, you acknowledge that you have read and understood the practices described in this document. This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming policy, all of which together form the full legal framework governing your use of ku89.

If you have any questions about this Privacy Policy or how your data is handled, please contact us at [email protected] at any time. Our English-language support team is available 24 hours a day, seven days a week.

02 Data We Collect

ku89 collects personal data through several channels: directly from you during registration and use of the Platform, automatically through your device and browser, and from third-party partners such as payment processors and identity verification providers.

2.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, residential address in Bangladesh, email address, and mobile phone number.
• Identity verification (KYC) data: Copies of government-issued photo ID (National ID card, passport, or driving licence), proof of address documents, and payment method verification screenshots.
• Financial data: Details of the payment methods you use (bKash account reference, Nagad number, Rocket number, Upay number, bank account details, Visa/Mastercard card details as applicable). ku89 does not store full card numbers — these are handled by PCI-DSS-compliant payment processors.
• Communications: Records of messages you send to our support team via email or live chat, including any attachments.
• Responsible gaming data: Deposit limit settings, self-exclusion requests, and session reminder preferences you configure on the Platform.

2.2 Information Collected Automatically

• Technical data: IP address, device type, operating system, browser type and version, screen resolution, and time zone settings.
• Usage data: Pages visited, features used, games played, bets placed, session duration, click patterns, and search queries on the Platform.
• Transaction data: A full log of all deposits, withdrawals, bets, wins, losses, and bonus transactions associated with your account.
• Cookie and tracking data: See Section 6 (Cookies & Tracking) for full details.

2.3 Information From Third Parties

• Payment providers: Confirmation of transaction status from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and card networks.
• Identity verification partners: Where ku89 uses a third-party KYC provider, that provider may share the result of identity checks with us (verified / not verified) along with any relevant flags.
• Fraud and risk partners: Third-party fraud detection services may share risk signals related to your IP address, device fingerprint, or transaction patterns.

03 How We Use Your Data

ku89 uses your personal data only for the purposes described in this Privacy Policy. The primary purposes for which we process personal data are:

• Account management: Creating, maintaining, and managing your ku89 player account, including processing logins and account-level communications.
• Service delivery: Processing bets, settling game outcomes, managing your account balance, and providing access to all Platform features including sports betting, live casino, and slots.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and Bangladeshi banks; verifying transactions; and preventing duplicate or fraudulent payment activity.
• Identity and age verification: Confirming that you are aged 21 or above and that the identity information you have provided is accurate, as required by our responsible gaming obligations.
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, multi-accounting, bonus abuse, and any other activity that violates our Terms & Conditions.
• Legal and regulatory compliance: Maintaining records as required by applicable law, responding to lawful requests from authorities, and fulfilling our anti-money laundering (AML) obligations.
• Customer support: Responding to your enquiries, resolving disputes, and improving the quality of our support interactions.
• Responsible gaming: Monitoring play patterns to identify problem gambling behaviour, enforcing deposit limits and self-exclusion arrangements, and providing intervention support where appropriate.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the performance, layout, and content of the ku89 Platform.
• Promotional communications: Sending you information about ku89 promotions, bonuses, and seasonal offers (e.g., Eid bonuses, BPL cricket promotions) — only where you have provided consent to receive such communications and only via the channels you have indicated.

04 Legal Basis for Processing

ku89 processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing:

• Contractual necessity: Processing required to perform the contract between you and ku89 — including operating your account, processing transactions, and settling bets.
• Legal obligation: Processing required to comply with applicable law, including KYC/AML requirements, age verification, and record-keeping obligations.
• Legitimate interests: Processing carried out in pursuit of ku89's legitimate business interests where those interests are not overridden by your data protection rights — including fraud prevention, platform security, and improving Platform performance.
• Consent: Where no other legal basis applies, ku89 will ask for your explicit consent before processing. You may withdraw consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

05 Data Sharing & Third Parties

ku89 does not sell, rent, or trade your personal data. We share your data with third parties only in the following limited circumstances:

5.1 Payment Processors

To facilitate deposits and withdrawals, ku89 shares the minimum necessary financial data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers process your data under their own privacy policies and security frameworks.

5.2 Identity Verification Partners

ku89 may use third-party KYC verification providers to confirm your identity and age. These providers receive only the data necessary to perform the verification (e.g., ID document images and personal details) and are contractually prohibited from using your data for any other purpose.

5.3 Game Providers

When you access games provided by third-party studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), a session token identifying your account may be shared with the relevant provider to enable gameplay. These providers do not receive your full personal profile and operate under their own data processing agreements with ku89.

5.4 Legal and Regulatory Authorities

ku89 will disclose your personal data to law enforcement agencies, regulatory bodies, or other authorities when required to do so by applicable law, court order, or lawful regulatory direction. In such cases, ku89 will disclose only the minimum data required and will notify you where legally permitted to do so.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of ku89's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any changes to the applicable privacy policy before the transfer takes effect.

06 Cookies & Tracking Technologies

ku89 uses cookies and similar tracking technologies (including pixel tags, web beacons, and local storage) to operate the Platform effectively, remember your preferences, and improve your experience. The categories of cookies we use are:

Most web browsers allow you to control cookie settings through their preferences or settings menus. Please note that disabling certain cookies may limit your ability to use some features of the ku89 Platform. ku89 does not use third-party advertising or retargeting cookies.

07 Data Retention

ku89 retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, subject to the following retention standards:

• Active account data: Retained for the duration of your registered account and for a minimum of five years following account closure, to meet legal and regulatory record-keeping requirements.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction, as required by applicable anti-money laundering regulations.
• KYC and identity documents: Retained for a minimum of five years following account closure. Where a longer retention period is required by law, that period will apply.
• Support communications: Retained for up to three years from the date of the last communication, unless the communication relates to an ongoing dispute or investigation, in which case it is retained until the matter is fully resolved.
• Anonymised analytics data: May be retained indefinitely in anonymised, aggregated form that cannot be used to identify individual players.

When data is no longer required for any legitimate purpose, ku89 will securely delete or anonymise it in accordance with our internal data disposal procedures.

08 Security Measures

ku89 takes the security of your personal data seriously and implements appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ku89 Platform.
• Encrypted data storage for sensitive personal and financial information held on ku89's servers.
• Access controls ensuring that only authorised ku89 personnel with a specific operational need can access personal data, on a strict need-to-know basis.
• Two-factor authentication available for all player accounts to provide an additional layer of login security.
• Regular security assessments including vulnerability scanning and penetration testing of the Platform's infrastructure.
• PCI-DSS compliance for all card payment processing, handled by certified third-party payment processors.
• Incident response procedures to detect, respond to, and notify affected players of any data security incidents in a timely manner.

09 Your Data Rights

As a ku89 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team at [email protected] with a clear description of your request. We will respond within 30 days.

Please note that some rights are subject to exceptions — for example, ku89 cannot delete data that we are legally required to retain for regulatory compliance purposes. Where we are unable to fulfil a request in full, we will explain why in our response.

10 Minors & Age Protection

The ku89 Platform is strictly intended for adults aged 21 and above. ku89 does not knowingly collect personal data from individuals under the age of 21. Age verification is carried out during the registration process and may be repeated at any point during the player lifecycle.

If ku89 becomes aware that personal data has been collected from a person under the age of 21, we will immediately close the relevant account, delete the associated personal data, and reverse any financial transactions associated with the underage account to the extent technically possible.

If you have reason to believe that an individual under 21 has registered on the ku89 Platform, please notify us immediately at [email protected]. We take all such reports seriously and will investigate promptly.

11 International Data Transfers

ku89 primarily processes and stores player data on servers located in secure data centre facilities. In certain circumstances — for example, where a third-party service provider (such as a KYC verification partner or cloud infrastructure provider) operates outside Bangladesh — your personal data may be transferred to and processed in a different country.

Wherever such transfers occur, ku89 takes appropriate steps to ensure that your personal data is protected to an equivalent standard as it would be under this Privacy Policy. These steps may include entering into standard contractual clauses with the relevant service provider or relying on the provider's established data protection certifications.

By using the ku89 Platform, you acknowledge and consent to the transfer of your personal data across borders as described in this section, where necessary to provide you with the services you have requested.

12 Changes to This Privacy Policy

ku89 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, applicable law, or the services we offer. When material changes are made, we will notify you by email to the address registered on your account and will post a prominent notice on the Platform.

The "Effective Date" at the top of this policy indicates when the current version came into force. We encourage you to review this Privacy Policy periodically to stay informed about how ku89 protects your data. Your continued use of the Platform following any update to this Privacy Policy constitutes your acceptance of the revised terms.

13 Contact Us

If you have any questions, concerns, or requests in relation to this Privacy Policy or the way ku89 handles your personal data, please contact our Data Protection team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Response time: We aim to respond to all privacy-related enquiries within 5 business days and to all Subject Access Requests within 30 calendar days.
• Language: All privacy enquiries are handled in English by our dedicated support team, available 24 hours a day, 7 days a week.
• Subject line: Please include "Privacy Request" or "Data Protection" in the subject line of your email so your message is routed to the correct team.