ku999 Privacy Policy

Who We Are

This Privacy Policy is issued by ku999 ("ku999", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at https://ku999.lat. ku999 acts as the data controller in respect of all personal data collected from players and visitors who access the platform from Bangladesh.

As data controller, ku999 determines the purposes for which personal data is collected and the means by which it is processed. This policy sets out our obligations to you as a data subject and explains the lawful bases upon which we rely to collect and process your personal information.

For all privacy-related enquiries, data access requests, or complaints, you may contact our dedicated data team at the email address listed in Section 14 of this policy. We are committed to responding to all legitimate data requests within a reasonable timeframe.

Data We Collect

ku999 collects personal data across several categories depending on the nature of your interaction with the platform. The table below provides a structured overview of the categories of data collected and the circumstances in which each category arises.

2.1 Data You Provide Directly

The majority of personal data held by ku999 is provided directly by you at the point of registration, during the KYC verification process, or in the course of contacting our customer support team. You are under no obligation to provide this data, but without it, we cannot create or maintain your ku999 account or process payments on your behalf.

2.2 Data Collected Automatically

When you access the ku999 website or mobile interface, certain technical data is collected automatically through cookies and server logs. This includes your IP address, approximate geographic location derived from that IP address, device identifiers, browser version, and the pages you visit within the platform. This data is used for security monitoring, fraud prevention, and platform performance optimisation.

2.3 Data from Third Parties

ku999 may receive limited personal data about you from third-party sources, including identity verification service providers used in the KYC process, payment processors such as bKash and Nagad where transaction confirmation data is returned to the platform, and fraud detection partners whose services help protect the integrity of the platform. Data received from third parties is handled with the same care and security standards as data collected directly.

How We Use Your Data

ku999 uses your personal data only for the specific purposes for which it was collected or for purposes that are compatible with those original purposes. The following list describes the primary uses of your personal data on the ku999 platform:

• Account Creation and Management: To register your account, verify your identity, maintain your account settings, and ensure that only you can access your account.
• Payment Processing: To facilitate deposits via bKash, Nagad, Rocket, Upay, and banking channels, and to process withdrawal requests to your nominated payment method.
• KYC and Age Verification: To confirm that you meet the 21+ age requirement and to verify your identity in line with our anti-money laundering obligations before processing withdrawals.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling behaviour, to enforce deposit and session limits you have set, and to process self-exclusion requests.
• Fraud Prevention and Security: To detect and prevent fraudulent account activity, bonus abuse, money laundering, and unauthorised account access.
• Customer Support: To respond to your enquiries, resolve disputes, and maintain records of communications for quality assurance purposes.
• Platform Improvement: To analyse aggregate, anonymised usage data to improve game selection, platform performance, and the overall player experience.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have given your consent to receive such communications.
• Legal Compliance: To fulfil our obligations under applicable law, to respond to lawful requests from regulatory or law enforcement authorities, and to retain records as required by law.

Legal Basis for Processing

Every instance of personal data processing by ku999 rests on one of the following recognised legal bases:

• Contractual Necessity: Processing that is necessary to fulfil the contract between you and ku999 — including account management, payment processing, and game delivery — is carried out on this basis.
• Legal Obligation: Processing required to comply with applicable laws and regulatory obligations — including KYC verification, transaction record-keeping, and anti-money laundering monitoring — is carried out on this basis.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics is carried out on the basis of ku999's legitimate interest in operating a safe and compliant platform, balanced against the reasonable privacy expectations of players.
• Consent: Processing of data for direct marketing communications is carried out on the basis of your explicit opt-in consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Sharing Your Data

ku999 does not sell your personal data. We share personal data with third parties only in the circumstances described below, and only to the minimum extent necessary for the specified purpose:

5.1 Payment Service Providers

When you make a deposit or request a withdrawal, the relevant payment service provider — such as bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, or Mastercard — will receive the transaction data required to process your request. These providers operate under their own privacy policies and are subject to their own data protection obligations.

5.2 Identity Verification Partners

To complete KYC verification, ku999 works with third-party identity verification services. These services receive the identity documents and data you submit for verification and return a pass or fail determination to the ku999 platform. Verification partners are contractually bound to use your data only for the stated verification purpose.

5.3 Game Providers

When you play a game supplied by a third-party studio — such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, or Spribe — limited session data is exchanged with that provider to facilitate the game round. Game providers do not receive your full personal profile and are contractually prohibited from using session data for purposes other than game delivery.

5.4 Legal and Regulatory Authorities

ku999 may disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by applicable law or in response to a valid legal process. In such cases, ku999 will disclose only the minimum data required to satisfy the legal request.

5.5 Business Operations

ku999 may share data with professional advisors, auditors, and technical service providers who support the operation of the platform, including hosting providers, cybersecurity firms, and analytics platforms. All such third parties are subject to contractual confidentiality obligations and are prohibited from using your data for their own purposes.

Cookies & Tracking Technologies

The ku999 website uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. A cookie is a small text file stored on your device by your browser when you visit a website. The following categories of cookies are used on the ku999 platform:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as session management, login authentication, and security verification. These cookies cannot be disabled without preventing you from using the platform.
• Functional Cookies: These cookies remember your preferences — such as language settings and responsible gaming limits — so that you do not need to re-enter them on each visit.
• Analytics Cookies: These cookies collect anonymised data about how players navigate the platform — which pages are visited most, where players encounter issues, and how game sessions flow. This data helps ku999 improve the platform experience.
• Security Cookies: These cookies support fraud detection and account protection functions, including identifying unusual login patterns that may indicate unauthorised access attempts.

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may impair the functionality of the ku999 platform. ku999 does not use cookies to serve third-party advertising.

Data Retention

ku999 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable legal and regulatory obligations, whichever is the longer period. The following retention guidelines apply:

• Active Account Data: Retained for the full duration of your account's active status plus a minimum of five years following account closure, to satisfy anti-money laundering record-keeping requirements.
• Identity Verification Documents: Retained for a minimum of five years following the completion of the KYC process or account closure, whichever occurs later.
• Transaction Records: Retained for a minimum of five years in line with financial record-keeping obligations.
• Customer Support Communications: Retained for a minimum of two years following the resolution of the relevant enquiry or complaint.
• Marketing Consent Records: Retained for as long as you hold an active account and for two years following account closure, to evidence the lawful basis for any marketing communications sent.
• Technical and Log Data: Retained for up to 12 months from the date of collection, unless a specific security investigation requires retention for a longer period.

When data is no longer required for any lawful purpose, ku999 will delete or anonymise it in a secure manner. Anonymised, aggregated data — which cannot be linked back to any individual — may be retained indefinitely for statistical and platform improvement purposes.

Data Security

ku999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the ku999 platform.
• Encryption at rest for sensitive data stored on ku999 servers, including payment details and identity documents.
• One-way cryptographic hashing of account passwords — meaning passwords cannot be read or recovered by any person, including ku999 staff.
• Multi-factor authentication options for player accounts and mandatory two-factor authentication for all internal staff accessing player data.
• Role-based access controls ensuring that only staff with a legitimate operational need can access personal player data.
• Regular third-party penetration testing and security auditing of the ku999 platform infrastructure.
• Intrusion detection systems and real-time security monitoring with automated alerting for suspicious activity.

While ku999 takes all reasonable precautions to protect your personal data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, ku999 will notify affected players as promptly as practicable and will take all necessary steps to contain and remediate the breach.

Your Rights

As a player on the ku999 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us using the details in Section 14. ku999 will respond to all verified data rights requests within 30 days.

• Right of Access: You have the right to request a copy of all personal data that ku999 holds about you, along with information about how that data is being used.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right does not apply where retention is required by applicable law — for example, where anti-money laundering regulations require us to retain transaction records.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to ku999 in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent — specifically for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.

Marketing Communications

ku999 may send you promotional emails, SMS messages, and in-platform notifications about bonuses, new games, seasonal offers, and other ku999 promotions. We will only send you marketing communications where you have expressly opted in to receive them at the time of account registration or subsequently through your account settings.

You may withdraw your consent to receive marketing communications at any time by updating your communication preferences in your account settings, or by sending a written request to [email protected]. Opt-out requests are processed within two business days. Please note that withdrawing marketing consent does not affect the sending of transactional communications — such as deposit confirmations, withdrawal notifications, security alerts, and responses to your support requests — which are sent on the basis of contractual necessity rather than consent.

ku999 does not share your contact details with third-party marketers and does not send marketing on behalf of any party other than ku999 itself.

Children & Minors

The ku999 platform is strictly intended for adults aged 21 and above. ku999 does not knowingly collect personal data from any person under the age of 21. If we become aware that an account has been registered by a person under 21, that account will be closed immediately and any personal data associated with it will be deleted, subject to any legal obligations requiring retention for investigation purposes.

If you believe that a person under the age of 21 in your household may have registered an account or accessed the ku999 platform, please contact us immediately at [email protected]. We take reports of underage access extremely seriously and will investigate and act on all such reports promptly. ku999 recommends that households where minors have access to internet-connected devices use reputable parental control software to restrict access to adult gaming platforms.

Third-Party Services

The ku999 platform integrates third-party services — including payment processors, game providers, and identity verification partners — that are necessary for the delivery of the platform's core features. When you interact with these third-party services via the ku999 interface, limited data is exchanged with those providers as described in Section 5 of this policy.

Each third-party provider operates under its own privacy policy and is independently responsible for data it processes in its own right. ku999 is not responsible for the privacy practices of third-party providers beyond the contractual obligations we impose on them as part of our service agreements. Players are encouraged to review the privacy policies of payment providers — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard — to understand how those providers handle your data.

The ku999 platform does not contain links to unaffiliated third-party websites or services. All content and functionality accessed through ku999.lat is operated by ku999 or by providers acting under contract with ku999.

Policy Amendments

ku999 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or changes to the services we provide. The date of the most recent amendment is shown in the hero section at the top of this page.

Where an amendment is material — meaning it significantly changes how your personal data is collected, used, or shared — ku999 will notify registered players by email at least 14 days before the revised policy takes effect. The notification will clearly describe the nature of the change. Your continued use of the ku999 platform following the effective date of a revised policy constitutes your acknowledgement of the updated terms.

If you do not accept a material change to this Privacy Policy, you may request account closure in accordance with the process described in the ku999 Terms & Conditions before the revised policy takes effect. Previous versions of this Privacy Policy are available on request from our data team.

Contact & Data Requests

For all privacy-related enquiries, data subject access requests, data correction requests, erasure requests, or marketing opt-out requests, please contact the ku999 data team using the details below. All correspondence should be sent in English to ensure prompt handling by our team.

• Email (plain text — not a clickable link): [email protected]
• Subject Line for Data Requests: "Privacy Request — [Your Full Name]"
• Response Timeframe: Within 30 days of receipt of a verified request
• Support Hours: 24 hours a day, 7 days a week
• Language: English

To protect your data, ku999 may need to verify your identity before actioning a data rights request. You may be asked to confirm details associated with your registered account or to provide a copy of a government-issued identification document. This verification step is a security measure designed to prevent unauthorised access to your personal data by third parties.