kuv9 Privacy Policy — How We Handle Your Personal Data

This Privacy Policy describes how kuv9 ("we", "us", "our", "the Platform") collects, uses, stores, and protects the personal information of individuals ("you", "User", "Player") who access or use the kuv9 website and associated services available at kuv9.app. This Policy forms part of and should be read together with the kuv9 Terms & Conditions. By registering an account or using the Platform, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein.

We are committed to handling your personal data responsibly, transparently, and in line with applicable data protection standards. We collect only the information that is necessary for delivering a safe, compliant, and enjoyable gaming experience on the kuv9 Platform. We do not sell your personal data to third parties, and we do not use your data for any purpose other than those described in this Policy.

kuv9 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that has not been listed below, unless we have obtained your explicit consent:

• Account management — to create, verify, maintain, and where necessary close your kuv9 account, including processing KYC documentation and age verification checks required under our responsible gaming commitments.
• Service delivery — to process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods; to confirm bets and game transactions; and to credit winnings to your account.
• Fraud prevention and security — to detect and prevent fraud, money laundering, multiple account creation, bonus abuse, and other forms of prohibited conduct; to monitor for unusual account activity and protect both the Platform and our users from financial and reputational harm.
• Customer support — to respond to your queries, complaints, and requests submitted via [email protected]; to maintain records of communications for quality assurance and dispute resolution purposes.
• Personalisation and marketing — to send you promotional communications about kuv9 bonuses, seasonal offers (such as those tied to BPL, Eid, or Pohela Boishakh), and new game releases, where you have opted in to receive such communications. You may opt out at any time by contacting [email protected].
• Platform improvement — to analyse aggregated, anonymised usage data in order to understand how players interact with the kuv9 Platform, identify technical issues, improve game performance, and develop new features that better serve the needs of Bangladeshi players across Dhaka, Chittagong, Sylhet, and beyond.

We process your personal data on the following legal grounds, depending on the specific purpose for which the data is used:

• Contractual necessity — processing required to perform our contract with you (i.e., to provide the kuv9 gaming service, manage your account, and process payments).
• Legal obligation — processing necessary for compliance with applicable law, including anti-money laundering regulations, age verification requirements, and fraud prevention obligations.
• Legitimate interests — processing carried out for purposes that are in our or a third party's legitimate interests, provided those interests are not overridden by your rights and interests (e.g. fraud detection, platform security, and network abuse prevention).
• Consent — where you have given us your explicit consent to process your data for a specific purpose, such as receiving promotional communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

kuv9 does not sell, rent, or trade your personal data. We may share your information only with the following categories of recipients, and only to the extent necessary for the purposes described in this Policy:

• Payment processors — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other payment service providers require certain account and transaction data to facilitate deposits and withdrawals on your behalf.
• Game providers — Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming, and other platform partners may receive anonymised session data to facilitate game functionality and ensure fair RNG outcomes.
• Fraud prevention and compliance services — specialist third-party providers who assist kuv9 in detecting fraud, verifying identity documents, and meeting anti-money laundering obligations.
• Legal and regulatory authorities — where required by applicable law, court order, or regulatory direction, kuv9 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities.

All third-party service providers engaged by kuv9 are required to process your data only in accordance with our instructions and this Privacy Policy, and to maintain appropriate technical and organisational security measures proportionate to the sensitivity of the data they handle.

kuv9 takes the security of your financial data with the utmost seriousness. We do not store full payment card numbers, bKash PINs, Nagad PINs, or any other payment authentication credentials on our servers. All payment transactions are processed through encrypted connections to our payment partner gateways. kuv9 employees do not have access to your payment authentication credentials at any time.

We retain a tokenised reference to your payment method (e.g. the last four digits of a card, or the first and last digits of a mobile wallet number) solely to allow you to recognise and manage your saved payment options within the Platform. This tokenised reference cannot be used to initiate any transaction without your active authorisation.

kuv9 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookies:

• Essential cookies — strictly necessary for the Platform to function. These include session cookies that keep you logged in and security cookies that prevent cross-site request forgery. You cannot opt out of essential cookies while using the Platform.
• Analytics cookies — used to collect anonymised information about how visitors use the Platform (e.g. which games are most popular, how long sessions last, which pages cause users to exit). This data helps us improve the kuv9 experience for players across Bangladesh.
• Preference cookies — store your language preference, display settings, and other personalisation choices so they are remembered on your next visit to the Platform.

You can manage or disable non-essential cookies through your mobile browser settings (Chrome for Android: Settings > Site Settings > Cookies; Safari for iOS: Settings > Safari > Privacy & Security). Disabling analytics or preference cookies will not prevent you from using the kuv9 Platform, but may affect some personalisation features.

kuv9 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply: active account data is retained for the lifetime of your account plus a minimum of five years following account closure, to meet our anti-money laundering and audit obligations; KYC identity documents are retained for a minimum of five years from the date of verification; transaction records (deposits, withdrawals, bet history) are retained for a minimum of five years from the date of the transaction; support correspondence is retained for three years from the date of the last interaction.

When data is no longer required, it is securely deleted or anonymised in a manner that prevents reconstruction of the original personal information. Anonymised aggregate data (from which no individual can be identified) may be retained indefinitely for statistical and product improvement purposes.

Subject to applicable law, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Request" and your registered account email address:

• Right of access — you may request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to rectification — you may request that we correct any inaccurate or incomplete personal data we hold about you. You may also update basic account information directly through your account settings.
• Right to erasure — in certain circumstances (e.g. where your data is no longer necessary for the purpose it was collected, or where you withdraw consent), you may request that we delete your personal data. Note that we may be required by law to retain certain data even after account closure.
• Right to object — you may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though we may demonstrate compelling grounds to continue.
• Right to data portability — where processing is based on your consent or a contract and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.

We will respond to all verified privacy requests within 30 days. Where a request is complex or numerous, we may extend this period by a further 30 days, in which case we will notify you and explain the reason for the delay.

kuv9 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include industry-standard SSL/TLS encryption for all data in transit between your device and our servers; AES-256 encryption for sensitive data stored at rest; role-based access controls ensuring that only authorised kuv9 personnel can access personal data, and only to the extent required for their specific job function; regular security audits, penetration testing, and vulnerability assessments of the Platform infrastructure; and firewalls, intrusion detection systems, and DDoS mitigation tools protecting our server environment.

While we take every reasonable precaution to protect your data, no security system is completely impenetrable. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, kuv9 will notify affected users without undue delay and will take all reasonable steps to mitigate the impact of the breach.

kuv9 is strictly an adults-only Platform. We do not knowingly collect, store, or process personal data from any person under the age of 21. If we become aware that personal data has been collected from a person under 21 without appropriate verification having been completed, we will delete that data immediately and close the associated account. If you believe that a minor has registered on kuv9, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

kuv9 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform features. When we make material changes, we will notify registered users via email or an in-platform notification at least 7 days before the changes take effect. The "Last updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform after any changes come into effect constitutes your acceptance of the revised Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way kuv9 handles your personal data, our support team is available around the clock.

Email us at: [email protected]