kuj9 Privacy Policy
for Bangladesh Players

1. Information We Collect

When you register for an account on kuj9, use our services, or interact with our Platform in any way, we may collect and process certain categories of personal data. The specific data collected depends on how you engage with our Platform and the services you use.

1.1 Registration and Identity Data

When you create a kuj9 account, we collect the following information that you provide directly:

• Full legal name as it appears on your government-issued identification
• Date of birth (for age verification purposes — all players must be 18+)
• Residential address in Bangladesh (including district, city, and postal code where applicable)
• Email address (used for account communication, verification, and notifications)
• Bangladeshi mobile number (used for account security and mobile wallet linkage)
• Username and password (password is stored in a hashed, non-reversible form)

1.2 Identity Verification (KYC) Documents

As part of our Know Your Customer (KYC) obligations, we may request and retain copies of the following documents:

• National Identity Card (NID), passport, or other government-issued photo ID
• Proof of address documentation dated within 90 days (utility bill, bank statement)
• Evidence of ownership of the payment method used for deposits (e.g., screenshot of bKash or Nagad account matching the registered name)

KYC documents are reviewed by our compliance team and stored securely. They are used solely for identity verification and fraud prevention and are not shared with third parties beyond what is necessary for these compliance purposes.

1.3 Transaction and Financial Data

We collect records of all financial transactions associated with your kuj9 account, including deposit amounts, withdrawal requests, payment method references (such as bKash or Nagad wallet identifiers), transaction timestamps, and transaction reference numbers. We do not store complete payment credentials such as full card numbers or mobile banking PINs.

1.4 Gameplay and Betting Activity Data

kuj9 records all betting and gaming activity carried out under your account. This includes game session logs, bet amounts, game outcomes, bonus usage records, and sports betting history. This data is used for account management, responsible gaming monitoring, fraud detection, and dispute resolution purposes.

1.5 Technical and Device Data

When you access kuj9, our servers automatically collect certain technical information about your device and connection, including:

• IP address and approximate geographic location derived from it
• Browser type, version, and operating system
• Device type (desktop, mobile, tablet) and screen resolution
• Pages visited, time spent on each page, and navigation paths within the Platform
• Referring URL (the page from which you arrived at kuj9)
• Date and time stamps of all Platform interactions

This technical data is collected automatically and does not require any action on your part. It is used to maintain Platform security, diagnose technical issues, and improve the overall player experience.

1.6 Communications Data

If you contact kuj9 customer support via email or live chat, we retain records of that correspondence, including the content of your messages, the date and time of contact, and any resolution steps taken. This data is used to resolve your query and to improve our support processes.

2. How We Use Your Data

kuj9 processes your personal data only for clearly defined, legitimate purposes. We do not use your data in ways that are incompatible with the purposes described at the time of collection. The primary purposes for which we use your data are as follows:

Purpose	Data Categories Used	Legal Basis
Account registration and management	Identity data, contact details, login credentials	Contractual necessity
Age and identity verification (KYC)	Identity data, KYC documents, date of birth	Legal obligation; contractual necessity
Processing deposits and withdrawals	Financial data, transaction records, payment method details	Contractual necessity
Fraud prevention and anti-money laundering	Identity data, financial data, device data, gameplay data	Legal obligation; legitimate interest
Responsible gaming monitoring	Gameplay data, session logs, deposit history	Legal obligation; player protection
Customer support and dispute resolution	Communications data, account data, transaction history	Contractual necessity; legitimate interest
Platform security and technical maintenance	Device data, IP address, session logs	Legitimate interest
Promotional communications (where consented)	Contact details, gameplay preferences	Consent (opt-in only)

2.1 Marketing Communications

kuj9 will only send you promotional emails or SMS messages if you have explicitly opted in to receive them during registration or through your account settings. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account dashboard or by contacting us at [email protected]. Withdrawal of consent to marketing does not affect our ability to send you essential service communications, such as transaction confirmations, security alerts, or updates to these policies.

2.2 Automated Decision-Making

kuj9 uses automated processes to screen accounts for fraud indicators, unusual transaction patterns, and potential responsible gaming concerns. Where an automated process results in a restriction being applied to your account, you have the right to request a manual review of that decision by contacting our support team. We will not make decisions that produce significant legal effects on you solely through automated means without offering a route to human review.

3. Data Sharing and Third Parties

kuj9 does not sell your personal data to any third party. We may share your data with carefully selected third parties only to the extent necessary to operate the Platform, comply with legal obligations, or protect the legitimate interests of kuj9 and its players.

3.1 Authorised Third-Party Categories

• Payment processing partners: bKash, Nagad, Rocket, Upay, and partner banks receive the minimum necessary transaction data to process your deposits and withdrawals. These partners operate under their own privacy policies and are independently responsible for data processed solely within their systems.
• Game studio providers: Certified third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session identifiers and wager data necessary to deliver and record game outcomes. These providers do not receive your full identity or financial data.
• KYC and identity verification services: Where kuj9 uses a third-party identity verification provider to assist with document review, that provider receives only the documents and data necessary to perform the verification and is contractually prohibited from using that data for any other purpose.
• IT infrastructure and cloud hosting providers: kuj9 uses third-party hosting infrastructure to store Platform data securely. All such providers are subject to data processing agreements requiring them to maintain confidentiality and implement appropriate technical security measures.
• Legal and regulatory authorities: kuj9 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or in connection with the investigation of fraud, money laundering, or other serious offences.

3.2 International Data Transfers

Some of kuj9's third-party service providers may be located outside Bangladesh. Where personal data is transferred internationally, kuj9 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to what you would expect under this Privacy Policy. This may include contractual clauses, data processing agreements, or reliance on the security certifications of the receiving party.

4. Cookies and Tracking Technologies

kuj9 uses cookies and similar technologies to ensure the Platform functions correctly, to remember your preferences, and to analyse how players use our services. A cookie is a small text file placed on your device by your web browser when you visit a website. Cookies do not contain executable code and cannot access other information on your device.

4.1 Types of Cookies Used by kuj9

• Essential cookies: These are necessary for the Platform to function and cannot be switched off. They include session management cookies that keep you logged in during your visit, security tokens, and load-balancing cookies. Without these cookies, kuj9 cannot be used.
• Functional cookies: These cookies remember your preferences — such as your preferred language setting, last visited game category, or display preferences — so that you do not need to re-enter them each time you visit. They persist across browser sessions for a defined period.
• Analytics cookies: kuj9 uses privacy-respecting analytics tools to understand aggregate usage patterns on the Platform. These cookies record information such as which pages are visited most frequently and how long players spend in different sections of the Platform. The data collected is aggregated and does not identify individual players.
• Security cookies: These cookies assist kuj9's fraud detection and account security systems by helping to identify unusual login behaviour, such as access from a new device or unusual geographic location.

4.2 Managing Your Cookie Preferences

You may control and manage cookie settings through your web browser. Most browsers allow you to view, delete, and block cookies from specific websites. Please note that blocking essential cookies will prevent you from using core features of the kuj9 Platform, including the ability to log in to your account. Instructions for managing cookies in the most common browsers are available in the respective browser's help documentation.

kuj9 does not currently use advertising cookies or third-party retargeting technologies that track your activity across other websites.

5. Data Security and Storage

kuj9 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure.

5.1 Technical Security Measures

• SSL/TLS encryption: All data transmitted between your device and the kuj9 Platform is encrypted using industry-standard SSL/TLS protocols, indicated by the HTTPS prefix and padlock icon in your browser.
• Password hashing: Account passwords are stored using a one-way cryptographic hashing algorithm. kuj9 staff cannot view or retrieve your password in plain text. If you forget your password, you must reset it via the password recovery process.
• Access controls: Access to personal data within the kuj9 organisation is restricted to employees and contractors who require it to perform their duties. All staff with access to player data are subject to confidentiality obligations.
• Secure data centres: Player data is stored in secure, access-controlled server environments with physical and logical security controls in place.
• Regular security reviews: kuj9 conducts periodic reviews of its data security practices to identify and address potential vulnerabilities.

5.2 Security Incident Response

In the event of a data security incident that poses a risk to your personal data, kuj9 will take immediate steps to contain and investigate the incident. Affected players will be notified at their registered email address as promptly as practicable, and we will provide guidance on any protective actions you should take. kuj9 will report security incidents to relevant authorities where required by applicable law.

6. Data Retention Policy

kuj9 retains personal data for no longer than is necessary for the purposes for which it was collected, taking into account our legal obligations, dispute resolution requirements, and legitimate business needs. The following retention periods apply to the main categories of player data:

Data Category	Retention Period	Reason
Account registration and identity data	Duration of account + 5 years after closure	Legal and regulatory compliance; fraud prevention
KYC documents	Duration of account + 5 years after closure	Anti-money laundering obligations
Transaction and financial records	Duration of account + 7 years after closure	Financial record-keeping obligations
Gameplay and betting history	Duration of account + 3 years after closure	Dispute resolution; responsible gaming audit trail
Customer support communications	3 years from date of interaction	Service quality and dispute resolution
Technical and device logs	12 months from collection	Security monitoring; fraud detection
Marketing consent records	Until consent withdrawn + 2 years	Proof of consent; legal compliance

At the end of the applicable retention period, personal data is securely deleted from kuj9's systems or anonymised in a manner that prevents re-identification. Where data must be retained beyond the standard period due to an ongoing legal dispute or regulatory investigation, we will retain the relevant data for the duration of that matter and delete it promptly upon resolution.

7. Your Privacy Rights

As a kuj9 player, you hold a number of rights in relation to your personal data. kuj9 is committed to honouring these rights and will respond to valid requests within 7 business days of receipt. In some cases we may need to verify your identity before processing a request, to ensure we do not disclose data to an unauthorised party.

7.1 Right of Access

You have the right to request a copy of the personal data that kuj9 holds about you. This is sometimes called a Subject Access Request (SAR). Upon receiving a verified SAR, kuj9 will provide you with a summary of the data categories held, the purposes for which they are processed, and copies of the data itself where technically feasible.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly through your account dashboard. For corrections to identity documents or other non-self-service fields, please contact [email protected] with the correct information and supporting evidence where applicable.

7.3 Right to Erasure

In certain circumstances, you have the right to request the deletion of your personal data — sometimes referred to as the "right to be forgotten". This right applies where the data is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Please note that this right is subject to overriding legal retention obligations; kuj9 cannot delete data that we are legally required to retain under financial or regulatory record-keeping rules.

7.4 Right to Restrict Processing

You may request that kuj9 restrict the processing of your personal data in certain situations — for example, while the accuracy of data you have disputed is being verified, or where you have objected to processing based on legitimate interest and a determination is pending.

7.5 Right to Object to Marketing

You have an absolute right to object to the processing of your personal data for direct marketing purposes at any time. Upon receiving a valid objection, kuj9 will cease processing your data for marketing purposes immediately. You may also update your marketing preferences directly through your account dashboard settings.

7.6 How to Exercise Your Rights

To exercise any of the above rights, please contact the kuj9 data team at [email protected], clearly stating your request type, your registered email address, and any relevant details. We may request proof of identity to verify the request. All requests will be acknowledged within 2 business days and resolved within 7 business days unless exceptional complexity requires an extension, in which case we will notify you of the extended timeline.

8. Updates to This Policy

kuj9 reviews this Privacy Policy periodically to ensure it accurately reflects our data processing practices and remains compliant with applicable law. We may update this Policy at any time. The revised Policy will be published on this page with an updated effective date displayed in the hero section at the top of this document.

Where an update materially changes the way we handle your personal data, kuj9 will notify you in advance by sending an email to your registered address. For minor clarificatory amendments that do not substantively affect your rights or the way your data is used, we may update the Policy without direct notification. We therefore encourage you to review this page periodically.

Continued use of the kuj9 Platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the updated Policy, you should cease using the Platform and may request account closure as described in the kuj9 Terms & Conditions, available at /terms-conditions.