ku98 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how ku98 ("ku98", "we", "us", "our") collects, uses, stores, and shares personal information in connection with your use of the ku98 online betting and casino platform, accessible at https://ku98.io ("the Platform").

This Policy applies to all registered and unregistered users of the Platform, including visitors who browse the site without creating an account, players who register and place bets, and individuals who contact our customer support team. By accessing the Platform or creating an account, you acknowledge that you have read, understood, and agreed to the practices described in this Policy.

This Policy should be read alongside the ku98 Terms & Conditions, which govern the overall contractual relationship between you and ku98. Where a conflict exists between this Policy and the Terms & Conditions in relation to data handling matters, this Policy shall take precedence.

2. Data Controller Information

For the purposes of applicable data protection law, ku98 acts as the data controller in respect of the personal information collected and processed through the Platform. As data controller, ku98 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable legal obligations.

If you have any questions about how ku98 processes your personal data, or if you wish to exercise any of your data protection rights as described in Section 11 of this Policy, you may contact our Data Protection team using the contact details set out in Section 14.

ku98 operates the Platform as an online entertainment service targeting adult players aged 21 and above across Bangladesh. Our primary data processing activities are conducted in connection with the provision of online betting, live casino games, slot games, and associated financial transaction services denominated in Bangladeshi Taka (BDT / ৳).

3. Personal Data We Collect

ku98 collects the following categories of personal data in connection with your use of the Platform:

ku98 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health information, or political opinions. If such information is inadvertently shared during customer support interactions, it will be treated with the highest level of confidentiality and will not be used for any purpose beyond resolving the specific support enquiry.

4. How We Collect Your Data

ku98 collects personal data through the following means:

• Direct submission by you: Data you provide when completing the registration form, submitting KYC documents, making a deposit or withdrawal request, contacting customer support, or completing any other form on the Platform.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including via cookies, web beacons, server logs, and similar tracking technologies. See Section 8 for details on cookies.
• Third-party payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other integrated payment partners when you initiate a deposit or withdrawal.
• Identity verification services: In some cases, ku98 may use third-party identity verification providers to cross-reference the identity documents you submit during KYC. These providers return only a verification result and do not store your documents independently.
• Fraud prevention partners: Risk signals and fraud indicators received from third-party fraud detection services that ku98 uses to protect the security of the Platform and its player base.

5. Legal Basis for Processing

ku98 processes your personal data only where it has a valid legal basis for doing so. The legal bases we rely upon are as follows:

• Contract performance: Processing that is necessary to provide the ku98 service to you in accordance with the Terms & Conditions you agreed to at registration. This includes processing your identity data to create your account, processing financial data to execute deposits and withdrawals, and processing usage data to deliver the games and betting markets you use.
• Legal obligation: Processing that is required by applicable law or regulation, including identity verification and KYC obligations, anti-money-laundering checks, and the retention of transaction records for the periods prescribed by law.
• Legitimate interests: Processing that is necessary for the legitimate business interests of ku98, provided that those interests are not overridden by your own data protection rights. This includes fraud detection, platform security, responsible gaming monitoring, and internal analytics used to improve the Platform.
• Consent: Where ku98 relies on your consent as the legal basis for processing — for example, in relation to optional marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. You may withdraw consent by contacting our support team.

6. How We Use Your Personal Data

ku98 uses your personal data for the following purposes:

• Account management: Creating and maintaining your ku98 player account, authenticating your identity at login, and managing account settings and preferences.
• Identity and age verification: Verifying that you are at least 21 years of age and that your identity details are accurate, in accordance with our KYC obligations and the eligibility requirements set out in our Terms & Conditions.
• Payment processing: Processing your deposits via bKash, Nagad, Rocket, Upay, and bank transfer, and processing withdrawal requests to your registered payment method. Detecting and preventing fraudulent financial transactions.
• Service delivery: Providing access to cricket betting markets, live casino games from providers including Pragmatic Play Live, Evolution Gaming, and Ezugi, slot games, and all other features of the ku98 Platform.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions for quality assurance and dispute resolution purposes.
• Responsible gaming: Monitoring your betting activity to identify patterns that may indicate problem gambling behaviour. Administering deposit limits, session reminders, and self-exclusion requests where you or our responsible gaming team activate these tools.
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent activity, money laundering, collusion, bonus abuse, and any other activity that violates our Terms & Conditions or applicable law.
• Platform improvement: Analysing aggregated usage data to understand how players interact with the Platform, identify technical issues, and improve the overall user experience for players across Bangladesh.
• Legal compliance: Fulfilling obligations imposed by applicable laws, including responding to lawful requests from regulatory bodies, law enforcement agencies, or courts of competent jurisdiction.
• Communications: Sending you transactional notifications related to your account activity (deposits, withdrawals, bet settlements) and, where you have consented, promotional communications about ku98 offers and events.

7. Data Sharing and Third-Party Disclosure

ku98 does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment service providers: bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, and connected banking partners receive the transaction details necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are independently regulated.
• Game content providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and game session data to operate their games within the ku98 platform environment. No directly identifiable personal data beyond what is technically necessary is shared with game studios.
• Identity verification providers: Third-party KYC and identity verification services used to validate the authenticity of documents submitted during account verification. These providers act as data processors under contractual data processing agreements with ku98.
• Fraud prevention and security services: Third-party fraud detection platforms that receive technical and behavioural signals (such as IP address, device fingerprint, and session data) to generate risk scores and fraud alerts used to protect the Platform.
• IT infrastructure and hosting providers: Cloud hosting and infrastructure service providers that store and process Platform data on behalf of ku98 under strict data processing agreements that prohibit independent use of player data.
• Legal and regulatory authorities: Law enforcement agencies, courts, regulatory bodies, and other government authorities where ku98 is legally required to disclose personal data in response to a lawful order, warrant, or regulatory request.
• Professional advisers: Legal counsel, auditors, and compliance consultants who require access to personal data in connection with the provision of professional services to ku98, subject to binding confidentiality obligations.

8. Cookies and Tracking Technologies

ku98 uses cookies and similar tracking technologies on the Platform to provide core functionality, enhance security, and analyse usage patterns. The following categories of cookies are used:

• Essential cookies: These cookies are strictly necessary for the Platform to function. They include session authentication cookies that keep you logged in during your session, security cookies that protect against cross-site request forgery, and load-balancing cookies. These cookies cannot be disabled without breaking core Platform functionality.
• Analytics cookies: These cookies collect aggregated, anonymised information about how visitors use the Platform — such as which pages are visited most frequently and whether users encounter error messages. This data helps ku98 improve the Platform experience. Analytics cookies do not identify individual players personally.
• Functional cookies: These cookies remember your preferences — such as your preferred language setting and last-used payment method — to provide a more personalised experience on return visits.
• Security and fraud detection cookies: These cookies support ku98's fraud prevention systems by helping to identify unusual device behaviour, suspicious login patterns, and bot activity across sessions.

Most web browsers allow you to control cookie settings via the browser's privacy or settings menu. You can choose to block or delete cookies at any time. However, please be aware that disabling essential cookies may prevent you from accessing certain features of the ku98 Platform, including the ability to log in to your account.

ku98 does not use third-party advertising cookies or allow advertising networks to place cookies on the Platform for the purpose of serving targeted advertisements to ku98 players.

9. Data Retention

ku98 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to maintain your active player account, and to comply with applicable legal and regulatory obligations. The following general retention guidelines apply:

• Active account data: Personal data associated with your active ku98 account is retained for the full duration of your account's active status and for a minimum period of five (5) years following permanent account closure, to comply with anti-money-laundering record-keeping requirements.
• Transaction records: Records of deposits, withdrawals, and betting transactions are retained for a minimum of five (5) years from the date of the transaction, in accordance with applicable financial record-keeping obligations.
• KYC and identity documents: Copies of identity documents submitted during account verification are retained for a minimum of five (5) years following the closure of your account or the end of the business relationship, whichever is later.
• Customer support records: Live chat transcripts and email correspondence related to support interactions are retained for a minimum of two (2) years from the date of the interaction, for dispute resolution and quality assurance purposes.
• Technical and log data: Server logs, IP address records, and session data are retained for up to twelve (12) months for security and fraud investigation purposes, after which they are automatically deleted or anonymised.

When personal data is no longer required for any of the purposes outlined above and no legal obligation requires its continued retention, ku98 will securely delete or anonymise it in accordance with our data disposal procedures.

10. Security of Your Personal Data

ku98 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and the ku98 Platform is encrypted using 256-bit SSL/TLS protocols. This applies to all pages of the Platform, including the login page, account dashboard, deposit and withdrawal pages, and customer support interfaces.
• Encryption at rest: Sensitive personal data — including identity documents, payment method details, and account credentials — is encrypted at rest using industry-standard encryption algorithms on ku98's secure server infrastructure.
• Access controls: Access to systems holding player personal data is restricted on a strict need-to-know basis. All internal access is subject to role-based access controls, and all privileged access is logged and audited.
• Intrusion detection: ku98's infrastructure is monitored around the clock by automated intrusion detection systems that alert the security team to anomalous access patterns, potential data exfiltration, and other security events.
• Vulnerability management: The ku98 platform undergoes regular security assessments, including penetration testing and vulnerability scanning, to identify and remediate security weaknesses before they can be exploited.
• Staff training: All ku98 employees and contractors who handle personal data receive regular training on data protection obligations, security best practices, and the correct procedures for reporting security incidents.

Despite these measures, no data transmission over the internet or data storage system can be guaranteed to be completely secure. If you become aware of or suspect any security breach affecting your ku98 account, please contact our support team immediately via live chat so that we can investigate and take appropriate action without delay.

11. Your Data Protection Rights

As a data subject, you hold a number of rights in relation to the personal data that ku98 holds about you. These rights are described below. To exercise any of these rights, please contact our support team using the details set out in Section 14.

• Right of access: You have the right to request a copy of the personal data that ku98 holds about you, along with information about how that data is being processed. ku98 will provide this information in a structured, commonly used format within a reasonable timeframe of receiving your verified request.
• Right to rectification: If any of the personal data ku98 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details (such as your contact information) directly within your account dashboard.
• Right to erasure: In certain circumstances, you have the right to request that ku98 delete the personal data it holds about you. This right is not absolute — it does not apply where ku98 is required to retain data to comply with a legal obligation, or where the data is necessary for the establishment, exercise, or defence of legal claims. Requests for erasure will be assessed on a case-by-case basis.
• Right to restrict processing: You may have the right to request that ku98 restricts its processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of the data is being resolved.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive the personal data you provided to ku98 in a structured, machine-readable format, and to transmit it to another controller.
• Right to object: You have the right to object to processing of your personal data where ku98 relies on legitimate interests as the legal basis for processing, if you believe that your individual rights and interests override ku98's legitimate interests in that particular processing activity.
• Right to withdraw consent: Where ku98 processes your data on the basis of your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

ku98 will not charge a fee for handling data subject requests unless a request is clearly unfounded or excessive, in which case a reasonable administrative fee may be applied. ku98 may need to verify your identity before processing a request to ensure that personal data is not disclosed to an unauthorised person.

12. Children and Minors

The ku98 Platform is strictly intended for use by adults aged 21 years and above. ku98 does not knowingly collect, process, or store personal data belonging to individuals under the age of 21.

During the registration process, all players are required to confirm that they meet the minimum age requirement. ku98 conducts age verification checks and reserves the right to request identity documents at any stage to confirm a player's date of birth. Any account found to belong to an individual under the age of 21 will be immediately closed and any associated funds voided in accordance with our Terms & Conditions.

If you are a parent or guardian and you believe that your child has registered on the ku98 Platform without your knowledge, please contact our support team immediately. ku98 will investigate the matter promptly and take appropriate action, including the deletion of any personal data associated with the minor's account.

13. Changes to This Privacy Policy

ku98 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legal requirements, or the features and services offered through the Platform. When we make material changes to this Policy, we will notify registered players by email and/or by displaying a prominent notice on the Platform at the time of next login.

The "Effective Date" at the top of this document indicates when the current version of the Policy came into force. We encourage you to review this Policy periodically so that you remain informed about how ku98 handles your personal data. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

Previous versions of this Privacy Policy will be archived and made available on request by contacting our support team. If you have questions about any changes to this Policy, please do not hesitate to reach out to us using the contact details below.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which ku98 handles your personal data, please contact our Data Protection team using the following details:

• Live Chat: Available 24/7 directly on the ku98 Platform. Average response time under 3 minutes. Simply open the live chat widget and state that your enquiry relates to data protection or privacy.
• Email: support at ku98.io — responses within 4 to 12 hours. Please include "Privacy Enquiry" in the subject line of your email to ensure your message is routed directly to the appropriate team.

When contacting ku98 about a data protection matter, please include your registered username or mobile number so that we can locate your account and respond efficiently. All data protection enquiries are handled in English by our support team, who are available around the clock every day of the year including public holidays in Bangladesh.