ukb9 Privacy Policy

1 Introduction and Scope

This Privacy Policy ("Policy") describes how ukb9 ("the Platform", "we", "us", "our") collects, uses, stores, shares, and protects personal data relating to individuals ("you", "the Player", "the User") who access or use the ukb9 platform at https://ukb9.io and any associated mobile-optimised interfaces (collectively, "the Platform").

This Policy applies to all personal data processed by ukb9 in connection with your use of the Platform, including data collected during account registration, identity verification, deposits and withdrawals, gameplay, customer support interactions, and marketing communications.

This Policy should be read alongside the ukb9 Terms & Conditions and Responsible Gaming Policy. By registering an account with ukb9, you confirm that you have read, understood, and accepted this Privacy Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform.

2 Data Controller Information

For the purposes of this Privacy Policy, ukb9 acts as the data controller in respect of the personal data it processes about registered players and website visitors. As data controller, ukb9 is responsible for determining the purposes and means of processing personal data.

For all data protection enquiries, requests to exercise your data subject rights, or complaints about how ukb9 handles personal data, please contact us using the following details:

• Email (plain text — not a link): [email protected]
• Subject line for data enquiries: "Data Privacy Request"
• Response time: ukb9 aims to acknowledge all data-related requests within 5 business days and to resolve them within 30 calendar days of receipt.

3 Personal Data We Collect

ukb9 collects the following categories of personal data from players and website visitors. The specific data points collected depend on the nature of your interaction with the Platform.

Data Category	Examples	Collection Trigger
Identity Data	Full name, date of birth, national ID number, passport number, gender	Registration, KYC verification
Contact Data	Mobile phone number, email address, residential address, district, city	Registration, support interactions
Financial Data	bKash/Nagad account number, bank account details, transaction history, deposit/withdrawal amounts in BDT	Deposits, withdrawals, AML checks
Technical Data	IP address, device type, operating system, browser type and version, session tokens	Automatic collection on site visit
Usage Data	Pages visited, games played, bets placed, time on platform, click paths, session duration	Automatic collection during gameplay
Communication Data	Live chat transcripts, support email content, complaint records	Customer support interactions
Marketing Preferences	Opt-in/opt-out status for promotional SMS and email, preferred communication channel	Registration, account settings
Responsible Gaming Data	Self-exclusion status, deposit limit settings, cooling-off periods, problem gambling indicators	Account settings, support interactions

4 How We Collect Your Data

ukb9 collects personal data through the following methods:

• Direct collection: Data you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or updating your account settings;
• Automated collection: Technical and usage data collected automatically by our platform infrastructure when you access the ukb9 website or mobile interface — this includes IP address logging, session data, and device fingerprinting for fraud prevention purposes;
• Cookies and tracking technologies: First-party cookies and similar technologies placed on your device during your visit to the Platform — see Section 8 for full details;
• Third-party sources: Identity verification data from KYC service providers; transaction data from payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank); fraud risk signals from fraud prevention partners; game activity data from casino content providers (Pragmatic Play, Evolution Gaming, Spribe, etc.);
• Publicly available sources: In limited circumstances, ukb9 may verify information against publicly available records as part of AML or enhanced due diligence procedures.

5 Legal Basis for Processing

ukb9 processes personal data only where there is a valid legal basis for doing so. The primary legal bases on which ukb9 relies are as follows:

• Contractual necessity: Processing required to perform our contract with you — including account creation, payment processing, game delivery, and withdrawal fulfilment;
• Legal obligation: Processing required to comply with our AML obligations, KYC requirements, fraud reporting obligations, and other applicable legal duties;
• Legitimate interests: Processing necessary for ukb9's legitimate business interests, such as fraud detection and prevention, platform security, responsible gaming monitoring, and analytics to improve platform performance — where these interests are not overridden by your fundamental rights;
• Consent: Where you have given clear consent to a specific processing activity, such as receiving promotional emails or SMS about ukb9 offers and seasonal promotions. You may withdraw consent at any time via your account marketing preferences without affecting the lawfulness of processing carried out before the withdrawal.

6 How We Use Your Data

ukb9 uses the personal data it collects for the following purposes:

• Account management: Creating and maintaining your player account, verifying your identity, authenticating your login sessions, and managing account security;
• Payment processing: Processing your deposits and withdrawal requests via bKash, Nagad, Rocket, Upay, and bank/card channels; reconciling financial transactions; issuing refunds where applicable;
• Regulatory compliance: Fulfilling our KYC obligations, conducting AML transaction monitoring, reporting suspicious activity to relevant authorities where legally required, and maintaining compliance records as required by law;
• Fraud prevention and platform security: Detecting and preventing fraudulent activity, bonus abuse, multi-accounting, unauthorised access, and other prohibited conduct as defined in the ukb9 Terms & Conditions;
• Game delivery and personalisation: Delivering the casino games, sports betting markets, and other content you access on the Platform; personalising your experience based on your game history and preferences where you have not opted out;
• Customer support: Responding to your enquiries, resolving complaints, and maintaining records of support interactions;
• Responsible gaming: Monitoring gameplay patterns for indicators of problem gambling; administering deposit limits, cooling-off periods, and self-exclusion requests; contacting players where our responsible gaming systems flag a concern;
• Marketing communications: Sending you promotional offers, bonus announcements, seasonal promotions (such as BPL match-day offers, Eid promotions, and Pohela Boishakh specials) where you have opted in to receive such communications. You may unsubscribe at any time;
• Platform analytics and improvement: Analysing usage patterns, identifying technical issues, measuring product performance, and making improvements to the ukb9 platform to enhance the player experience.

7 Data Sharing and Third Parties

ukb9 does not sell your personal data. We share personal data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard — to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and are subject to applicable financial data regulations;
• KYC and identity verification providers: Third-party identity verification services that assist ukb9 in verifying the authenticity of identification documents and confirming player identities as part of our AML/KYC obligations;
• Game content providers: Casino game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Habanero, Spribe, and Ezugi receive limited technical data (such as session tokens and player IDs) to enable game delivery. These providers do not receive your full personal profile;
• Fraud prevention and security partners: Specialist fraud detection and cybersecurity service providers who assist ukb9 in identifying and preventing fraudulent activity on the Platform;
• Analytics providers: Platform analytics services that process anonymised or pseudonymised usage data to help ukb9 understand how players interact with the Platform. No directly identifiable personal data is shared for pure analytics purposes;
• Legal and regulatory authorities: ukb9 will disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by applicable law, court order, or legitimate legal process. ukb9 will notify affected players of such disclosures to the extent permitted by law;
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of ukb9's assets, personal data held by ukb9 may be transferred to the acquiring entity as part of that transaction. Affected players will be notified in advance of any such transfer and of any changes to this Policy that result from it.

All third-party data processors engaged by ukb9 are required to enter into a data processing agreement that contractually obliges them to process personal data only on ukb9's documented instructions, to implement appropriate technical and organisational security measures, and to delete or return personal data at the end of their engagement.

8 Cookies and Tracking Technologies

ukb9 uses first-party cookies and similar tracking technologies on its Platform. Cookies are small text files placed on your device that help the Platform function correctly and enable ukb9 to understand how players interact with it.

The following categories of cookies are used by ukb9:

Cookie Type	Purpose	Can Be Disabled?
Strictly Necessary	Session management, login authentication, security tokens, anti-CSRF protection. Essential for the Platform to function.	No — required for operation
Functional	Remembering your language preferences, display settings, and game lobby configuration between sessions.	Yes — optional
Analytics	Measuring page views, session duration, click paths, and feature usage to help ukb9 improve the platform. Data is aggregated and pseudonymised.	Yes — optional
Fraud Prevention	Device fingerprinting and behavioural signals used to detect and prevent fraudulent activity, multi-accounting, and unauthorised access.	No — required for security

You can manage cookie preferences via your browser settings. Most modern browsers allow you to block or delete cookies through their privacy or settings menu. Note that disabling strictly necessary or fraud prevention cookies may impair the functionality of the ukb9 platform or prevent you from logging in to your account.

ukb9 does not use third-party advertising cookies or allow advertising networks to place tracking pixels on the Platform.

9 Data Retention

ukb9 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law, whichever is longer. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years following account closure, in accordance with AML and record-keeping obligations;
• Financial transaction records: Retained for a minimum of 5 years following the date of each transaction, as required by anti-money laundering regulations;
• KYC verification documents: Retained for a minimum of 5 years following account closure or the completion of the relevant KYC process;
• Customer support and complaint records: Retained for 3 years following the closure of the relevant support ticket or complaint;
• Marketing preference records: Retained for 2 years following the last marketing interaction or until you withdraw consent, whichever occurs first;
• Technical and usage data: Retained in identifiable form for up to 13 months; thereafter retained in aggregated, anonymised form for analytical purposes indefinitely;
• Self-exclusion and responsible gaming records: Retained for the duration of the exclusion period and for a minimum of 5 years thereafter to prevent re-registration during an active exclusion.

When personal data is no longer required and retention obligations have expired, ukb9 securely deletes or irreversibly anonymises that data in accordance with our internal data destruction procedures.

10 Data Security

ukb9 takes the security of your personal data seriously and implements a layered set of technical and organisational security measures designed to protect your information from unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the ukb9 platform is encrypted using industry-standard SSL/TLS protocols. You can verify this by the padlock icon in your browser's address bar;
• Encryption at rest: Sensitive personal data — including identity documents and financial data — is encrypted when stored in ukb9's database infrastructure;
• Access controls: Access to personal data within ukb9's systems is restricted on a strict need-to-know basis. Staff members are granted the minimum level of data access necessary to perform their role;
• Two-factor authentication: ukb9 supports and encourages 2FA for all player accounts. Internal administrative systems require mandatory 2FA for all staff;
• Regular security audits: ukb9 conducts periodic internal and third-party security assessments to identify and remediate vulnerabilities in its platform and infrastructure;
• Incident response: ukb9 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to affected players, ukb9 will notify impacted individuals as promptly as practicable and in accordance with applicable legal requirements.

11 Your Rights as a Data Subject

As a player on the ukb9 platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please email [email protected] with the subject line "Data Privacy Request" and provide sufficient information to identify your account. ukb9 will respond within 30 calendar days.

• Right of access: Request a copy of the personal data ukb9 holds about you, along with information about how it is processed and with whom it is shared;
• Right to rectification: Request correction of inaccurate or incomplete personal data. Note that changes to core identity data (name, date of birth, ID number) require completion of an identity re-verification process;
• Right to erasure ("right to be forgotten"): Request deletion of your personal data where ukb9 no longer has a legitimate basis to retain it. This right is subject to overriding legal retention obligations — for example, AML regulations require ukb9 to retain certain transaction records for a minimum of 5 years;
• Right to restrict processing: Request that ukb9 restrict processing of your data while a rectification or objection request is under review;
• Right to data portability: Receive your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) so that you can transfer it to another service provider where technically feasible;
• Right to object: Object to processing based on legitimate interests, including direct marketing. ukb9 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests;
• Rights related to automated decision-making: Request human review of any decision made solely by automated means that produces a significant effect on you, such as an automated account restriction triggered by our fraud detection systems.

ukb9 will not charge a fee for handling data subject requests unless a request is manifestly unfounded, repetitive, or excessive, in which case a reasonable administrative fee may apply. ukb9 reserves the right to request additional identification verification before fulfilling a data access or erasure request to protect against fraudulent requests.

12 Children and Minors

ukb9 is strictly an adult platform. The Platform is intended solely for individuals who are aged 21 years or older. ukb9 does not knowingly collect personal data from individuals under the age of 21.

During account registration, ukb9 requires players to confirm that they are aged 21 or above. As part of our KYC verification process, ukb9 verifies the date of birth of all registered players using government-issued identity documents. Any account found to belong to an individual under the age of 21 will be immediately suspended, all funds will be handled in accordance with applicable regulations, and the personal data associated with that account will be securely deleted except where retention is required by law.

If you believe that a minor has registered on the ukb9 platform or that ukb9 has inadvertently collected personal data from a person under the age of 21, please contact us immediately at [email protected] so that we can take prompt corrective action.

13 Changes to This Policy

ukb9 reviews and updates this Privacy Policy periodically to reflect changes in applicable law, regulatory guidance, business practices, or the introduction of new platform features that affect the personal data we process.

When we make material changes to this Policy — meaning changes that significantly affect your rights or the way we handle your personal data — we will notify you by:

• Posting a prominent notice on the ukb9 platform for a period of at least 30 days prior to the changes taking effect;
• Sending an in-platform notification to all registered players with an active account;
• Where we hold your email address and you have not opted out of operational communications, sending an email notification summarising the key changes.

Non-material changes — such as corrections of typographical errors, clarification of existing provisions, or restructuring for readability — may be made without advance notice. The "Last updated" date at the top of this document will always reflect the date of the most recent revision.

Your continued use of the ukb9 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should close your ukb9 account and cease using the Platform before the effective date of the new Policy.

14 Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have a concern about the way ukb9 has handled your personal data, please contact our data protection team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: "Data Privacy Request" or "Data Protection Complaint"
• Response time: Acknowledgement within 5 business days; full resolution within 30 calendar days

ukb9 takes all data protection complaints seriously. If you raise a complaint with us and are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.

ukb9 is committed to resolving all data privacy concerns fairly, transparently, and in good faith. We value your trust and work continuously to maintain the highest standards of data protection for all players across Bangladesh.