Privacy Policy — How u9k Collects, Uses and Protects Your Data

When you create a u9k account, we collect the following information directly from you:

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet) and postal code
• Email address
• Mobile phone number
• Preferred currency (Bangladeshi Taka, BDT)
• Username and hashed account password

This data is required to create your account and cannot be omitted. Providing false registration information is a breach of our Terms and Conditions and may result in account closure.

As part of our Know Your Customer (KYC) obligations, u9k may request documentary evidence to verify your identity, age, and residential address. Acceptable documents include:

• National ID card (NID)
• Valid passport
• Driver's licence
• Recent utility bill or bank statement (for address verification)

KYC documents are stored securely with access restricted to authorised compliance personnel only. Copies are retained for the period required by applicable financial and anti-money laundering record-keeping rules.

When you make a deposit or withdrawal on u9k, we collect transaction-related data including your payment method type (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard), transaction amounts in BDT, transaction timestamps, and payment reference numbers. We do not store full card numbers or bKash/Nagad PINs on our servers. Payment credentials are handled by our payment processing partners under their own security protocols.

When you access u9k, we automatically collect certain technical data including:

• IP address and approximate geographic location (city/region level)
• Device type, operating system, and browser version
• Session timestamps (login time, session duration, logout time)
• Pages and game types visited
• Wager history and game outcome records
• Referral source (how you arrived at u9k)

This technical data helps us maintain platform security, detect fraud, improve performance, and personalise your experience in accordance with your preferences.

When you contact u9k customer support via email, live chat, or any other communication channel, we retain a record of the correspondence, including the content of your messages, the date and time of contact, and the resolution provided. These records are used for service quality monitoring, dispute resolution, and regulatory compliance purposes.

Where you have provided consent at registration or via your account settings, u9k may send you promotional communications about bonuses, seasonal offers (such as Eid, Pohela Boishakh, or cricket season promotions), and new game releases. You may withdraw consent and opt out of marketing communications at any time by contacting [email protected] or updating your account notification preferences. Opting out of marketing does not affect your ability to receive transactional or service notifications related to your account.

Transaction data (payment method, amount, reference number) is shared with our payment processing partners to execute your deposit and withdrawal requests. These partners include bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and international card processors. Each partner processes this data under their own privacy and security frameworks in addition to our contractual requirements.

Where games are supplied by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others — limited session and wager data may be transmitted to those providers' game servers for the purpose of delivering game content, calculating outcomes, and maintaining game integrity. No personal identification data beyond a pseudonymous session token is shared with game providers.

u9k uses third-party fraud detection and risk assessment tools that may process your IP address, device fingerprint, and behavioural patterns to identify suspicious activity, prevent account takeovers, and detect money laundering or bonus abuse. These tools operate under strict data processing agreements and do not retain identifiable data beyond the period required for their security function.

u9k may be required to disclose personal data to law enforcement agencies, regulatory bodies, or courts where we receive a valid legal order or where disclosure is necessary to prevent fraud, money laundering, or other criminal activity. In such cases, we will disclose the minimum amount of data required to satisfy the legal obligation. Where permitted by law, we will notify affected users of such disclosures.

u9k retains personal data for the following periods, after which data is securely deleted or anonymised:

• Active account data: Retained for the full duration of the account relationship.
• Transaction and financial records: Retained for a minimum of five years from the date of the transaction, in line with anti-money laundering record-keeping requirements.
• KYC documents: Retained for a minimum of five years from the date of account closure.
• Support correspondence: Retained for three years from the date of the last interaction.
• Technical and session data: Retained for up to 12 months from the date of collection, then anonymised.
• Self-exclusion records: Retained for the duration of the exclusion period plus five years, to prevent re-registration.

You may request the deletion of your personal data by contacting [email protected]. u9k will action erasure requests where there is no overriding legal, regulatory, or contractual obligation to retain the data. In practice, financial transaction records and KYC documents cannot be deleted before the end of their mandatory retention period due to anti-money laundering compliance requirements. All other personal data where no such obligation exists will be deleted within 30 days of a valid erasure request.

• Strictly necessary cookies: Required for platform operation, including session management and login authentication. These cannot be disabled without breaking core functionality.
• Functional cookies: Remember your language preference, display settings, and recently visited game categories to personalise your experience.
• Analytics cookies: Collect anonymised data about how pages are used — such as most-visited sections and average session duration — to help us improve the platform. No personally identifiable information is included in analytics data.
• Security cookies: Support fraud detection functions by maintaining a fingerprint of your device session to identify anomalous access patterns.

You may manage or delete cookies via your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the u9k platform.

You may request a full copy of the personal data u9k holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of receiving a verified request. Requests made more than once within any 12-month period may be subject to a reasonable processing fee.

If you believe that any personal data u9k holds about you is inaccurate, incomplete, or out of date, you have the right to request correction. You may update basic account details (such as contact number or email address) directly via your account settings. Changes to identity-verified information (such as name or date of birth) require submission of supporting documentation.

You have the right to object to the processing of your personal data for direct marketing purposes at any time. To opt out, email [email protected] or update your notification preferences in the account settings panel. Opt-out requests will be actioned within five business days. You will continue to receive essential transactional communications (such as deposit confirmations and security alerts) regardless of your marketing preference.

u9k implements a layered security architecture to protect personal data from unauthorised access, disclosure, alteration, or destruction. Security measures in place include:

• 256-bit SSL/TLS encryption on all data in transit
• AES-256 encryption for sensitive data at rest
• Multi-factor authentication available for all player accounts
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Regular third-party security audits and penetration testing
• Automated intrusion detection and anomaly alerting systems
• Secure, geographically redundant data storage facilities

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, u9k will notify affected users as soon as reasonably practicable — and in any event within 72 hours of becoming aware of the breach — via the email address registered to the account. Notification will include: a description of the nature of the breach, the categories and approximate number of records affected, the likely consequences of the breach, and the steps u9k is taking to address it and mitigate any adverse effects.