ku908 Privacy Policy — How We Protect Your Data

This Privacy Policy ("Policy") describes how ku908 ("we", "us", "our", "the Platform") collects, processes, stores, and protects personal information provided by or obtained from users ("you", "Member", "Player") of the ku908 online betting and gaming platform at ku908.io. This Policy applies to all users accessing the Platform from Bangladesh and any other jurisdiction in which ku908 operates.

By registering an account, making a deposit, or otherwise using any part of the ku908 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the ku908 Platform.

This Policy should be read alongside the ku908 Terms and Conditions and Responsible Gaming Policy, both of which are incorporated by reference and together form the complete agreement between you and ku908.

1. Introduction

ku908 is committed to protecting the personal data of all players across Bangladesh, including those based in Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, and Mymensingh. We recognise that trust is the foundation of any responsible online betting platform, and the careful stewardship of your personal information is central to that trust.

This Policy sets out in plain, transparent terms the categories of data we collect, the specific purposes for which we use it, the circumstances under which it may be shared, the security measures we apply, the length of time we retain it, and the rights you hold as a data subject. We aim to be specific and honest — this document is not a generic privacy notice designed to obscure our practices.

2. Data We Collect

2.1 Registration Data

When you create a ku908 account, we collect the following personal information:

• Full legal name as it appears on your government-issued identification.
• Date of birth (to verify that you are aged 21 or above).
• Residential address, including district and division within Bangladesh.
• Valid email address.
• Mobile phone number registered in your name (used for account verification and security alerts).
• Chosen username and an encrypted record of your password hash.

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may collect:

• Scanned or photographed copy of your National Identity Card (NID), passport, or driving licence.
• Proof of address document (such as a recent utility bill or bank statement).
• Proof of payment method ownership (screenshot or confirmation linking your bKash, Nagad, Rocket, or bank account to your name).
• Selfie or live photograph for facial verification purposes where required.

2.3 Financial Data

We collect data related to your transactions on the Platform, including:

• Deposit and withdrawal amounts, timestamps, and payment method identifiers.
• Transaction reference numbers provided by payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank).
• Account balance history and bonus fund movements.

We do not store complete payment card numbers. Any card data is handled exclusively by PCI-DSS compliant payment processors and is not retained on ku908 servers.

2.4 Betting & Gaming Activity Data

We maintain records of your activity on the Platform, including:

• Bets placed, including stake amounts, odds, markets selected, and outcomes.
• Casino game sessions, including game titles, session durations, bet sizes, and results.
• Wagering history relevant to bonus and promotion tracking.

2.5 Technical & Device Data

When you access ku908, our systems automatically record:

• IP address and approximate geographic location (city/district level).
• Device type, operating system, and browser version.
• Session timestamps — login time, logout time, and session duration.
• Referring URL (if you arrived at ku908 via an external link).
• Pages visited and features used within the Platform.

2.6 Communications Data

When you contact ku908 customer support, we retain:

• The content of your messages and our responses.
• Any attachments or documents you share with us.
• Timestamps and channel (email, live chat, or other support method).

3. How We Collect Data

ku908 collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, contact support, or respond to a survey or promotion.
• Automatically — through server logs, session cookies, and analytics tools that record your interaction with the Platform, as described in Section 7 (Cookies & Tracking).
• From third-party service providers — identity verification agencies may return confirmed or flagged KYC results; payment processors confirm transaction status; fraud detection services may flag risk indicators associated with your account.

4. How We Use Your Data

ku908 uses collected personal data for the following purposes:

• Account creation and management — to register your account, authenticate your identity at login, and maintain your account in good standing.
• Identity verification (KYC) — to confirm that you are aged 21 or above and that the account is registered under your own legal identity, in accordance with responsible gaming obligations.
• Transaction processing — to accept deposits, process withdrawal requests, and maintain an accurate record of your account balance in BDT.
• Customer support — to respond to your queries, resolve disputes, and provide assistance in relation to your account or any Platform service.
• Fraud prevention and security — to detect and prevent unauthorised account access, bonus abuse, money laundering, collusion, and other prohibited conduct described in the Terms and Conditions.
• Regulatory compliance — to fulfil any legal obligations placed on ku908 by applicable law, including data retention requirements and cooperation with law enforcement agencies where lawfully required.
• Platform improvement — to analyse aggregate user behaviour, identify technical issues, optimise game performance, and improve the overall user experience across devices.
• Promotions and communications — to notify you of bonuses, reload offers, BPL and IPL seasonal promotions, and other relevant updates via email or in-platform notification, subject to your communication preferences.
• Responsible gaming — to monitor your betting patterns for signs of problem gambling behaviour and, where appropriate, to apply deposit limits, cooling-off periods, or self-exclusion tools in accordance with our Responsible Gaming Policy.

5. Legal Basis for Processing

ku908 processes your personal data on the following legal bases:

• Contractual necessity — processing is necessary to perform our obligations under the account agreement with you, including account management, transaction processing, and customer support.
• Legal obligation — processing is necessary to comply with applicable laws and regulations, including KYC/AML obligations and data retention requirements.
• Legitimate interests — processing is necessary for ku908's legitimate interests in fraud prevention, platform security, and service improvement, provided these interests are not overridden by your privacy rights.
• Consent — for optional processing activities such as marketing communications, we rely on your freely given, specific, and informed consent, which you may withdraw at any time by contacting [email protected].

6. Sharing Your Data

ku908 does not sell, rent, or trade your personal data. We share your data only with the following categories of carefully selected third parties, and only to the extent necessary for the stated purpose:

• Payment processors — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive transaction data necessary to process your deposits and withdrawals. These partners operate under their own privacy policies and applicable financial regulations.
• Identity verification providers — third-party KYC specialists may receive copies of your identification documents for verification and fraud screening purposes.
• Technology and hosting providers — infrastructure partners who host and operate the Platform may process certain technical data as part of their service delivery. These providers are bound by data processing agreements with ku908.
• Game content providers — game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive pseudonymised session data necessary to operate their games within the Platform environment.
• Law enforcement and regulatory authorities — where ku908 is required by law or a valid legal process to disclose information, we will do so. We will endeavour to notify you of such a request where permitted by law.

7. Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. ku908 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and understand how users interact with the site so we can improve it.

7.2 Types of Cookies We Use

• Essential cookies — these are strictly necessary for the Platform to function. They maintain your login session, store your cart or bet slip state, and enable security features. The Platform cannot operate without them.
• Functional cookies — these remember your preferences such as language setting, display preferences, and previously selected payment methods, making your experience more convenient.
• Analytics cookies — these collect aggregate, pseudonymised data about how users navigate the Platform (e.g., which pages are most visited, how long sessions last). This information helps ku908 identify areas for improvement.
• Security cookies — these help detect unusual login patterns, prevent cross-site request forgery (CSRF), and support fraud detection mechanisms.

7.3 Managing Cookies

Most web browsers allow you to control cookies through their settings. You may block or delete cookies at any time, though please be aware that disabling essential cookies will prevent you from logging in and using core Platform features. Adjusting cookie preferences in your browser settings does not affect data already collected.

8. Data Retention

ku908 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce our agreements. The following retention guidelines apply:

• Account data — retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with applicable financial record-keeping requirements.
• KYC and identity documents — retained for a minimum of five (5) years from the date of last account activity or account closure, whichever is later.
• Transaction records — retained for a minimum of five (5) years from the date of each transaction.
• Betting and gaming history — retained for a minimum of three (3) years from the date of each session.
• Support communications — retained for two (2) years from the date of the last communication in a support thread.
• Technical and log data — retained for up to twelve (12) months from the date of collection, unless longer retention is required for fraud investigation or legal proceedings.

When personal data is no longer required, ku908 will securely delete or anonymise it so that it can no longer be associated with your identity.

9. Data Security

ku908 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security framework includes:

• Transport encryption — all data transmitted between your device and ku908 servers is protected using 256-bit TLS/SSL encryption. The padlock icon in your browser confirms this protection is active.
• At-rest encryption — sensitive data stored in our databases, including identity documents and financial records, is encrypted using AES-256 at rest.
• Access controls — access to personal data within ku908 is granted on a need-to-know basis. All internal access is role-restricted, authenticated, and logged for audit purposes.
• Penetration testing — the Platform undergoes regular independent security assessments and penetration tests conducted by qualified third-party specialists.
• Incident response — ku908 maintains a documented data breach response procedure. In the event of a confirmed breach affecting your personal data, we will notify affected users promptly and take all reasonable steps to contain and remediate the incident.

10. Your Privacy Rights

As a ku908 Member, you hold the following rights in relation to your personal data:

• Right of access — you may request a copy of all personal data we hold about you. We will respond within a reasonable period and at no charge for standard requests.
• Right to rectification — if any personal data we hold is inaccurate or incomplete, you may request that we correct it. Updates to core account data (name, date of birth) may require re-verification.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that we cannot delete data we are required by law to retain.
• Right to restriction — you may request that we restrict our processing of your data in certain circumstances, for example where you contest its accuracy while we investigate.
• Right to data portability — you may request a machine-readable copy of the personal data you have provided to ku908 for the purpose of transferring it to another service provider.
• Right to withdraw consent — where we process your data on the basis of consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object — you may object to our processing of your data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, where you believe your rights and interests override those of ku908.

To exercise any of the above rights, please contact our support team at [email protected] with the subject line "Privacy Request". We will acknowledge your request within 48 hours Bangladesh Standard Time (BST, UTC+6) and aim to fulfil it within 30 calendar days.

11. Children's Privacy

The ku908 Platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. If we discover that an account has been registered by a person under the age of 21, the account will be immediately closed, all data associated with that account will be securely deleted except where retention is required by law, and any deposited funds will be returned to the source payment method following verification.

If you believe a minor has registered an account on ku908, please notify us immediately at [email protected] so we can investigate and act promptly.

12. International Data Transfers

ku908 primarily stores and processes data within infrastructure serving the Bangladesh market. In some circumstances, data may be processed by third-party service providers whose infrastructure is located outside Bangladesh — for example, global payment processors, identity verification specialists, or cloud hosting providers.

Where such transfers occur, ku908 ensures that appropriate contractual protections are in place — including data processing agreements that impose equivalent data protection obligations on the receiving party — so that your personal data remains protected to the same standard described in this Policy, regardless of where it is processed.

13. Changes to This Policy

ku908 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When a material change is made, we will notify you via the email address registered to your account and/or by displaying a prominent notice on the Platform.

The effective date at the top of this document will always reflect the date on which the current version came into force. We encourage you to review this Policy periodically. Continued use of the Platform following notification of changes constitutes acceptance of the revised Policy.

The current version of this Policy is always accessible at ku908.io/privacy-policy.

14. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way ku908 handles your personal data, please contact our support team using the details below:

• Email: [email protected]
• Subject line: Privacy Policy Enquiry
• Support Hours: 24/7, including weekends and all Bangladeshi public holidays
• Response Time: We aim to acknowledge all privacy-related queries within 48 hours Bangladesh Standard Time (BST, UTC+6) and resolve them within 30 calendar days.

For responsible gaming concerns, including requests for self-exclusion or deposit limits, please visit our Responsible Gaming page.