End-to-End Encryption
All data transmitted between your device and kku9.io is protected by 256-bit SSL encryption. Whether you are depositing via bKash, logging in, or submitting KYC documents, your data is secured in transit at all times.
No Data Selling
kku9 does not sell, lease, or trade your personal information to third-party marketing organisations. Your data is used exclusively for the purposes described in this policy — never for commercial sale to external parties.
Your Data Rights
As a kku9 member, you hold clear rights over your personal data: the right to access it, correct inaccuracies, request deletion (subject to legal retention obligations), and withdraw consent for non-essential processing at any time.
Secure Payment Data
Financial transaction data — including bKash, Nagad, Rocket, Upay, and bank transfer details — is handled through encrypted payment channels. kku9 does not store full payment credentials on its own servers beyond what is strictly necessary for transaction processing.
KYC Confidentiality
Identity documents submitted for KYC verification — including National ID cards, passports, and utility bills — are stored on secure servers and accessed only by authorised kku9 compliance team members. They are never shared with game providers or third-party advertisers.
Transparent Cookie Use
kku9 uses cookies solely to improve platform functionality, maintain your login session, and analyse aggregate usage patterns. We do not use third-party advertising cookies that track you across unrelated websites.
Introduction
kku9 ("we", "us", "our", "the Platform") operates kku9.io, an online betting and casino platform serving members across Bangladesh. This Privacy Policy describes how kku9 collects, processes, stores, and protects the personal information of individuals who access or use the kku9 platform, including visitors, registered members, and anyone who contacts kku9 support.
This policy is written in plain English and is intended to be fully transparent about our data practices. We strongly encourage you to read it in full before registering an account or making any deposit. If you have questions about any aspect of this policy, please contact our support team at [email protected] or via 24/7 live chat on kku9.io.
This Privacy Policy should be read in conjunction with kku9's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference and together constitute the full agreement between you and kku9 governing your use of the platform.
Data We Collect
kku9 collects personal data in the following categories. We collect only the minimum amount of data necessary for the stated purpose — a principle known as data minimisation.
| Data Category | Specific Data Points | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, NID / passport number | Account registration and KYC age/identity verification |
| Contact Data | Email address, mobile phone number, residential address (including division, district) | Account communication, support, regulatory notices |
| Financial Data | bKash / Nagad / Rocket / Upay account numbers, bank account details, transaction history, deposit and withdrawal amounts in BDT | Processing transactions, fraud prevention, AML compliance |
| Gaming Data | Bet history, game session data, win/loss records, bonus usage, wagering activity | Platform operation, responsible gaming monitoring, dispute resolution |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps, cookies | Platform security, fraud detection, performance optimisation |
| Communications Data | Live chat transcripts, support email correspondence, complaint records | Customer support, quality assurance, dispute evidence |
| KYC Documents | Scanned / photographed copies of National ID, passport, driving licence, utility bills, selfie verification images | Identity and age verification, regulatory compliance |
We do not intentionally collect sensitive personal data (such as racial or ethnic origin, religious beliefs, political opinions, or health data) unless it is voluntarily disclosed to us in a support context, in which case it will not be stored beyond the immediate purpose for which it was shared.
How We Collect Data
kku9 collects personal data through the following channels and methods:
- Direct Registration: When you create a kku9 account, you provide identity and contact data directly via the registration form. This includes your name, date of birth, email address, and phone number.
- KYC Submission: When you complete identity verification, you upload documents directly through the kku9 platform's secure document portal.
- Deposit and Withdrawal Processing: Financial data is collected when you initiate transactions through bKash, Nagad, Rocket, Upay, or Bangladeshi bank transfer channels connected to kku9.
- Platform Usage: Technical data including IP addresses, device identifiers, session durations, and navigation paths is collected automatically as you use kku9.io through server logs and first-party cookies.
- Support Interactions: When you contact kku9 via live chat or email, the content of those interactions is recorded and stored as communications data.
- Gameplay: Your betting and gaming activity is recorded in real time by the kku9 platform and, where applicable, by the game provider's certified RNG system.
kku9 does not purchase personal data from data brokers, data aggregators, or any third-party list provider. All personal data we hold has been collected directly from you or generated through your use of the kku9 platform.
How We Use Your Data
kku9 uses the personal data it collects for the following purposes. We process data only for purposes that are lawful, specific, and proportionate to the data involved:
- Account Management: To create, maintain, and manage your kku9 member account, including authentication, profile updates, and account settings.
- Identity and Age Verification (KYC): To confirm that you are who you claim to be and that you are at least 21 years of age, as required by kku9's minimum age policy.
- Transaction Processing: To process deposits and withdrawals in Bangladeshi Taka (৳) via your chosen payment method, including bKash, Nagad, Rocket, Upay, and supported Bangladeshi banks.
- Platform Delivery: To deliver the core betting and casino functionality of kku9, including sportsbook markets, slot games, live dealer tables, and other platform features.
- Responsible Gaming: To monitor your gaming activity for indicators of problem gambling behaviour and, where required, to apply responsible gaming tools such as deposit limits, loss limits, and self-exclusion.
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, collusion, money laundering, and other prohibited activities on the kku9 platform.
- Customer Support: To respond to your queries, complaints, and disputes efficiently and accurately, using records of your account history and prior communications.
- Legal and Regulatory Compliance: To comply with applicable anti-money laundering (AML), know-your-customer (KYC), and other legal obligations that require us to collect, verify, and retain certain data about members.
- Platform Improvement: To analyse aggregate, anonymised usage patterns in order to improve the kku9 platform's performance, usability, and feature set.
- Service Communications: To send you transactional communications (e.g., deposit confirmations, withdrawal notifications, account alerts) and, where you have opted in, promotional communications about kku9 offers and bonuses.
kku9 does not use personal data for automated decision-making that produces legal or similarly significant effects without human review, except for real-time fraud detection systems that may temporarily flag or restrict an account pending a human compliance review.
Legal Basis for Processing
kku9 processes your personal data on the following legal bases, depending on the nature of the processing activity:
- Contractual Necessity: The majority of our data processing is necessary to perform the contract between you and kku9 — i.e., to provide you with a functioning betting and casino account. This includes account management, transaction processing, KYC verification, and delivering the gaming platform.
- Legal Obligation: Certain processing activities are required by applicable law, including AML compliance, KYC identity verification requirements, and financial record-keeping obligations. kku9 must carry out this processing regardless of your preferences.
- Legitimate Interests: kku9 processes certain data (such as technical/device data and session logs) on the basis of its legitimate interests in operating a secure, fraud-free, and compliant platform, provided those interests are not overridden by your rights.
- Consent: Where processing is not required by contract or law — for example, sending you promotional offers by email — kku9 will only do so with your explicit opt-in consent. You may withdraw this consent at any time by updating your communication preferences in your account settings or by emailing [email protected].
Sharing Your Data
kku9 does not sell your personal data. We may share your data with the following categories of third parties, strictly for the purposes described, and only to the extent necessary:
- Game Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited session data (such as a player session token) in order to deliver their games. These providers do not receive your full identity data and are bound by strict data processing agreements with kku9.
- Payment Processors: When you make a deposit or withdrawal, kku9 shares the necessary financial and identity data with the relevant payment processor (e.g., bKash, Nagad, Rocket, Upay, or the relevant Bangladeshi bank) to complete the transaction. This data sharing is governed by the payment processor's own privacy policies and applicable financial regulations.
- KYC and Identity Verification Partners: kku9 may use third-party identity verification services to assist with document authentication. These partners process your identity documents on kku9's behalf and are contractually prohibited from using that data for any purpose other than the verification service they provide.
- Fraud Prevention and Security Services: kku9 may share technical data (IP addresses, device fingerprints, transaction patterns) with specialist fraud detection services to protect the platform and its members.
- Legal and Regulatory Authorities: kku9 may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by applicable law, court order, or regulatory direction. In such cases, kku9 will disclose only the minimum data required to satisfy the legal obligation.
- Professional Advisors: kku9 may share limited data with its legal, financial, and compliance advisors where necessary for them to provide professional services, subject to confidentiality obligations.
All third parties with whom kku9 shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for purposes beyond those for which it was shared.
Cookies and Tracking Technologies
kku9 uses first-party cookies and similar tracking technologies on kku9.io for the following purposes:
- Essential Cookies: These cookies are strictly necessary for the kku9 platform to function. They maintain your login session, remember your language and currency settings, and ensure the security of your account during a session. These cookies cannot be disabled without significantly impairing your ability to use the platform.
- Functional Cookies: These cookies remember your preferences (such as game display settings and responsible gaming limit configurations) across sessions, so you do not need to re-enter them each time you log in.
- Analytics Cookies: kku9 uses first-party analytics cookies to collect aggregate, anonymised data about how members use the platform — which pages are visited most frequently, how long sessions typically last, and where users encounter difficulties. This data helps us improve the platform. Individual users are not identified in analytics reports.
- Security Cookies: Certain cookies are used by kku9's fraud detection systems to identify unusual or suspicious activity, such as login attempts from multiple geographic locations or abnormal betting patterns.
kku9 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts that follow you across unrelated websites. Your browsing activity outside of kku9.io is not tracked by the kku9 platform.
You may configure your browser to block or delete cookies; however, doing so may affect your ability to log in and use certain features of the kku9 platform. Persistent blocking of essential cookies may result in session errors or reduced platform functionality.
Data Retention
kku9 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:
- Active Account Data: Personal data associated with an active kku9 account is retained for the lifetime of the account and is accessible to the member at any time via their account settings.
- Post-Closure Retention: Following the closure of a kku9 account (whether by the member or by kku9), personal data — including identity records, transaction history, and KYC documents — is retained for a minimum period of five (5) years. This retention period reflects standard financial record-keeping requirements and the need to preserve evidence for potential legal or regulatory proceedings.
- Transaction Records: Deposit and withdrawal records in BDT are retained for a minimum of five (5) years following the date of the transaction, in line with anti-money laundering record-keeping standards.
- Support Communications: Live chat transcripts and email correspondence are retained for three (3) years following the closure of the relevant support ticket, to support dispute resolution and quality assurance.
- Technical Logs: Server logs, IP address records, and session data are retained for twelve (12) months, after which they are deleted or anonymised.
- Marketing Consent Records: Where you have opted in to receive promotional communications, your consent record is retained for the duration of your membership and for two (2) years following account closure.
Once the applicable retention period expires, personal data is securely deleted or irreversibly anonymised in accordance with kku9's data destruction procedures. Anonymised aggregate data (which cannot identify any individual) may be retained indefinitely for statistical and business analysis purposes.
Data Security
kku9 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:
- Transport Layer Security (TLS/SSL): All data transmitted between your browser or app and kku9's servers is encrypted using TLS 1.2 or higher with 256-bit encryption. The kku9.io HTTPS connection is enforced at all times — unencrypted HTTP connections are automatically redirected.
- At-Rest Encryption: Personal data stored on kku9's servers — including KYC documents, financial records, and account information — is encrypted at rest using AES-256 encryption.
- Access Controls: Access to personal data within kku9's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of data access required to perform their role. All internal data access is logged and audited.
- Two-Factor Authentication (2FA): kku9 offers optional two-factor authentication for member accounts, adding a second layer of identity confirmation when logging in from a new device or location.
- Intrusion Detection: kku9's infrastructure is monitored continuously for suspicious activity, including unauthorised login attempts, unusual data access patterns, and potential security breaches.
- Third-Party Security Audits: kku9's platform and data security practices are subject to periodic review by independent security professionals to identify and remediate vulnerabilities.
Despite these measures, no internet-connected system can guarantee absolute security. In the event of a data breach that poses a significant risk to members' rights, kku9 will notify affected members and take immediate remediation steps as swiftly as technically possible.
Your Rights
As a kku9 member, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact kku9 at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and provide a substantive response within 30 days.
- Right of Access: You have the right to request a copy of all personal data that kku9 holds about you. We will provide this in a structured, commonly used format.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain data directly through your account settings.
- Right to Erasure ("Right to be Forgotten"): You may request that kku9 delete your personal data. Please note that this right is subject to our legal obligations — we are required by law to retain certain data (such as financial records and KYC documents) for a minimum of five years, and deletion of data subject to these obligations will not be possible until the relevant retention period has expired.
- Right to Restrict Processing: You may request that kku9 restricts the processing of your data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
- Right to Data Portability: Where technically feasible and applicable, you may request that kku9 provides your personal data in a machine-readable format for transfer to another provider.
- Right to Withdraw Consent: Where processing is based on your consent (e.g., receiving promotional emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal of consent can be done via account settings or by emailing [email protected].
- Right to Object: You may object to data processing carried out on the basis of kku9's legitimate interests. kku9 will consider your objection and will cease processing unless it can demonstrate compelling legitimate grounds that override your rights.
Children and Minors
kku9 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21 years. The kku9 platform is not designed for, marketed to, or intended for use by persons under the age of 21.
All registration applications are subject to age verification as part of the KYC process. Where kku9 discovers that personal data has been collected from an individual who is under 21 years of age, that data will be permanently and irreversibly deleted, the associated account will be immediately suspended, and any funds held in that account will be forfeited in accordance with our Terms & Conditions.
If you are a parent or guardian and you believe that a minor in your care has registered on kku9 without your knowledge, please contact us immediately at [email protected] with subject line "Underage Account Report". We will investigate and act on verified reports within 24 hours.
Updates to This Privacy Policy
kku9 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or improvements to platform functionality. All updates will be published on this page at kku9.io/privacy-policy, with the "Last Updated" date at the top of this page revised accordingly.
Where changes are material — meaning they significantly affect your rights or our data processing practices — kku9 will provide advance notice to registered members via email at least 7 days before the updated policy takes effect. Non-material changes (such as typographical corrections or minor clarifications that do not alter the substance of the policy) take effect immediately upon publication.
Your continued use of the kku9 platform after the effective date of any updated policy constitutes your acknowledgement and acceptance of the changes. If you do not accept a material change to this policy, you may close your account and withdraw any available balance before the effective date of the update. To close your account, contact kku9 support via live chat or at [email protected].
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way kku9 handles your personal data, please contact our Data Privacy team through any of the following channels:
- Email: — use subject line "Privacy Enquiry" for fastest routing to our data privacy team.
- Live Chat: Available 24 hours a day, 7 days a week, via the live chat widget on kku9.io. Our support agents can assist with general privacy questions and escalate formal data rights requests to the relevant team.
- Support Hours: Bangladesh Standard Time (BST, UTC+6), 24/7, every day of the year including public holidays.
kku9 aims to acknowledge all privacy-related enquiries within 5 business days and to provide a full substantive response within 30 calendar days. For complex data rights requests (such as full data subject access requests), an extension of up to an additional 30 days may be required, in which case we will notify you of the extension and the reason for it before the initial 30-day deadline expires.