ku33 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

In this Privacy Policy, the following terms have the meanings set out below unless the context requires otherwise:

• "ku33", "we", "us", "our" — refers to the ku33 platform and its operators, accessible at https://ku33.onl.
• "Platform" — the ku33 website, mobile web application, and all associated services, games, and features available at https://ku33.onl.
• "Player", "you", "your" — any individual who accesses, registers, or interacts with the ku33 Platform in any capacity.
• "Personal Data" — any information that can directly or indirectly identify a natural person, including but not limited to name, date of birth, National Identity Card (NID) number, mobile phone number, email address, payment account details, IP address, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, organisation, retrieval, use, disclosure, erasure, or destruction.
• "KYC" — Know Your Customer, the identity and age verification process through which ku33 collects and verifies Player identity documents.
• "Third-Party Processor" — any third-party service provider engaged by ku33 to process Personal Data on its behalf, such as payment gateway operators, game content providers, and fraud prevention services.
• "Effective Date" — 1 January 2026, being the date from which this version of the Privacy Policy takes legal effect.

ku33, operating through its platform at https://ku33.onl, acts as the data controller in respect of all Personal Data collected from Players. As data controller, ku33 is responsible for determining the purposes and means of processing Personal Data gathered through the Platform.

All enquiries relating to this Privacy Policy, data subject access requests, and requests to exercise any data rights described in Section 11 should be directed to the ku33 data privacy team using the contact information provided in Section 15 of this document.

ku33 collects the following categories of Personal Data from Players. The specific data collected may vary depending on the features of the Platform you use and the stage of your relationship with ku33.

ku33 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data (beyond identity verification photography), or health data, except where a Player voluntarily discloses health-related information in connection with a responsible gaming self-exclusion request.

ku33 collects Personal Data through the following mechanisms:

• Directly from you: When you register an account, complete the KYC verification process, make a deposit or withdrawal, contact the support team, or complete any form on the Platform.
• Automatically: When you access and use the Platform, our servers automatically record technical data including your IP address, browser type, pages visited, and session duration. This data is collected via server logs, cookies, and similar tracking technologies described in Section 8.
• From payment providers: When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, or Upay, these payment providers share transaction confirmation data with ku33 to allow us to credit or debit your Account accordingly.
• From identity verification services: ku33 may engage third-party KYC verification providers to assist in validating the identity documents you submit. These providers share the results of their verification checks with ku33.
• From fraud prevention partners: ku33 may receive risk-scoring data from fraud prevention services to help identify potentially fraudulent or suspicious account activity.
• From game content providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may share game session and outcome data with ku33 as part of the game delivery process.

ku33 processes Personal Data only where a valid legal basis exists. The legal bases on which ku33 relies are as follows:

• Contractual necessity: The majority of processing carried out by ku33 is necessary to perform the contract between ku33 and the Player — i.e., to operate the Player's account, accept deposits, process withdrawals, settle bets, and deliver the services the Player has requested.
• Legal obligation: ku33 is required to collect and retain certain Personal Data to comply with applicable legal obligations, including KYC identity verification, anti-money laundering (AML) record-keeping, and fraud prevention requirements.
• Legitimate interests: ku33 processes certain data (such as technical and behavioural data) on the basis of its legitimate business interests, including improving platform security, detecting and preventing fraud, analysing platform usage to enhance the player experience, and communicating service updates to registered Players.
• Consent: Where ku33 sends marketing communications or uses non-essential cookies, it does so only with your explicit prior consent. You may withdraw consent at any time by contacting the support team or adjusting your cookie preferences.

ku33 uses the Personal Data it collects for the following specific purposes:

• Account creation and management: To register your account, verify your identity, manage your profile settings, and maintain the security of your account over time.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay; to credit winnings to your Account Balance; and to maintain an accurate and auditable transaction history.
• Age and identity verification (KYC): To confirm that you meet the minimum age requirement of 21 years and to verify that the identity information provided during registration is accurate and genuine.
• Fraud and security monitoring: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, match-fixing, collusion, and any other prohibited conduct set out in the ku33 Terms & Conditions.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and communicate with you regarding the status of your account or any ongoing investigations.
• Responsible gaming: To monitor betting patterns for signs of problem gambling, to implement deposit limits, cooling-off periods, and self-exclusion measures at your request, and to contact you if our responsible gaming systems identify a concern.
• Platform improvement: To analyse aggregated usage data and identify opportunities to improve the Platform's features, user interface, game selection, and overall player experience.
• Legal compliance: To maintain records required by applicable law, to respond to lawful requests from law enforcement or regulatory authorities, and to enforce the ku33 Terms & Conditions.
• Marketing communications (with consent only): To send you promotional offers, bonus notifications, and platform updates via SMS or other channels, where you have explicitly opted in to receive such communications.

ku33 does not sell, rent, or otherwise transfer your Personal Data to unaffiliated third parties for their own independent marketing or commercial purposes. Personal Data is shared only in the following limited circumstances:

• Payment providers: Transaction data is shared with bKash, Nagad, Rocket, and Upay solely to the extent necessary to process your deposit and withdrawal requests.
• KYC and identity verification providers: Identity documents and verification data are shared with authorised third-party KYC providers who assist ku33 in confirming the authenticity of Player identity documents. These providers operate under strict data processing agreements and may not use your data for any other purpose.
• Game content providers: Limited gameplay session data is shared with game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) as part of the real-time game delivery process. These providers receive only the minimum data required to facilitate game play.
• Fraud prevention and security partners: Technical and behavioural data may be shared with specialist fraud detection services to help identify and prevent fraudulent activity on the Platform.
• Legal and regulatory authorities: ku33 may disclose Personal Data to law enforcement agencies, courts, regulators, or other governmental authorities in Bangladesh or other relevant jurisdictions where required to do so by applicable law, court order, or in connection with an investigation into suspected criminal activity involving the Platform.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of the assets of ku33, Player Personal Data may be transferred to the acquiring entity, subject to that entity assuming the obligations of this Privacy Policy.

The ku33 Platform uses cookies and similar tracking technologies to operate core platform functions, improve user experience, and analyse platform usage. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are required for the Platform to function. They include session authentication cookies, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without affecting core platform functionality.
• Functional cookies: These cookies remember your preferences (such as language settings and account display options) to provide a more personalised experience on return visits.
• Analytics cookies: ku33 uses privacy-respecting analytics tools to understand how Players navigate and use the Platform. This data is used in aggregate form to improve Platform design and game discovery. Analytics cookies require your consent and may be declined without affecting your ability to use the Platform.
• Security cookies: These cookies assist in detecting and preventing fraudulent activity, including bot traffic, credential stuffing, and session hijacking attempts.

You may manage your cookie preferences through your browser settings at any time. Disabling strictly necessary cookies will impair your ability to use the Platform. Disabling functional or analytics cookies will not prevent you from accessing games or managing your account.

ku33 does not use third-party advertising cookies or cross-site tracking technologies for the purpose of behavioural advertising.

ku33 retains Personal Data for the periods set out below, after which the data is securely deleted or anonymised unless a longer retention period is required by applicable law:

Where retention beyond the standard period is required by a specific legal obligation, court order, or ongoing investigation, ku33 will retain the relevant data for the duration of that requirement and delete it promptly upon its conclusion.

ku33 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the ku33 platform, ensuring that data in transit cannot be intercepted or read by unauthorised parties.
• AES-256 encryption at rest for all sensitive stored data, including identity documents, payment account numbers, and KYC records.
• Access controls and role-based permissions to ensure that only authorised ku33 personnel with a specific operational need can access Personal Data, with access logs maintained and reviewed regularly.
• Two-step verification (2SV) available to all Players to add an additional authentication layer to their accounts, and mandated internally for all ku33 staff accessing Player data systems.
• Regular security audits and penetration testing conducted by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
• Intrusion detection and prevention systems (IDPS) monitoring platform traffic in real time to detect and block suspicious access attempts.
• Incident response procedures that are activated immediately upon detection of a potential data security incident, with a commitment to notifying affected Players within 72 hours where their Personal Data has been or may have been compromised.

While ku33 takes all reasonable and practicable steps to protect your Personal Data, no electronic system is entirely immune to security risks. Players are responsible for maintaining the confidentiality of their own account credentials and for notifying ku33 immediately if they suspect their account has been accessed without authorisation.

As a Player whose Personal Data is processed by ku33, you hold the following rights in respect of your data. To exercise any of these rights, please contact the ku33 data privacy team using the contact details in Section 15. ku33 will respond to all valid data subject requests within 30 calendar days of receipt.

• Right of Access: You have the right to request a copy of all Personal Data that ku33 holds about you. This is sometimes referred to as a Subject Access Request (SAR). ku33 will provide the data in a structured, readable format at no charge for the first request in any 12-month period.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data that ku33 holds about you. Minor corrections (such as updating a mobile phone number) can be made directly through your Account Settings panel. Corrections to identity or KYC data require supporting documentation.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing applies. Note that ku33 may be required to retain certain data beyond the date of your erasure request to comply with legal obligations, as described in Section 9.
• Right to Restriction of Processing: You may request that ku33 restricts the processing of your Personal Data in certain circumstances, such as while the accuracy of the data is being contested or where you have objected to processing pending determination of ku33's legitimate grounds.
• Right to Data Portability: Where processing is carried out on the basis of your consent or contractual necessity, and is performed by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format so that it may be transferred to another service provider of your choosing.
• Right to Object: You have the right to object to processing of your Personal Data where that processing is based on ku33's legitimate interests. ku33 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without providing a reason. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

The ku33 Platform integrates with a number of third-party services to deliver its full range of features. While ku33 carefully selects its third-party partners and requires them to maintain appropriate data protection standards, the privacy practices of these third parties are governed by their own privacy policies, not this document.

The categories of third-party services used by ku33 and the general nature of the data shared with them are as follows:

• Payment gateways (bKash, Nagad, Rocket, Upay): Transaction confirmation data, including your registered mobile number and transaction amounts, is shared with these providers to facilitate deposits and withdrawals. Please review the privacy policies of these payment providers for details of how they handle your data.
• Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi): Your Player ID and real-time session data are shared with game studios during active gameplay sessions. These providers operate their games under licence and handle data in accordance with their own regulatory obligations.
• KYC and identity verification services: Identity document images and personal data are shared with authorised verification partners to complete the KYC process. These partners are contractually bound to process your data only for verification purposes.
• Analytics and performance monitoring: Anonymised or aggregated usage data may be processed by third-party analytics tools to help ku33 monitor platform performance and identify areas for improvement. No personally identifiable data is shared with analytics providers without consent.

ku33 is not responsible for the data practices of third-party websites or services that you may access via links on the Platform. Players are encouraged to read the privacy policies of any third-party service they interact with independently of the ku33 Platform.

The ku33 Platform is strictly intended for adults aged 21 years and above. ku33 does not knowingly collect, store, or process Personal Data from individuals under the age of 21. If ku33 becomes aware that Personal Data has been collected from a person under the age of 21, it will take immediate steps to delete that data and permanently close the associated account.

If you are a parent or guardian and believe that a person under the age of 21 in your care has registered an account on the ku33 Platform or submitted Personal Data through the Platform, please contact the ku33 support team immediately via live chat or email so that the account can be closed and the data deleted without delay.

ku33 reserves the right to amend this Privacy Policy at any time in response to changes in applicable law, changes to Platform features, updates to the services provided by third-party partners, or changes in ku33's internal data handling practices.

When material amendments are made to this Privacy Policy, ku33 will notify registered Players by posting a prominent notice on the Platform and, where practicable, by sending a notification to the mobile number associated with the Player's Account. The "Effective Date" at the top of this document will be updated to reflect the date of the most recent revision.

Your continued use of the ku33 Platform following any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with any amendment, you must cease using the Platform and may request closure of your account by contacting the ku33 support team.

Archived versions of previous Privacy Policy documents are available upon request by contacting the ku33 data privacy team using the details in Section 15.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which ku33 handles your Personal Data, please contact the ku33 data privacy team using the following details:

• Platform: ku33 — https://ku33.onl
• Support Email: support@ku33.onl (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week
• Response Time: Data subject rights requests are acknowledged within 3 business days and fulfilled within 30 calendar days of receipt
• Language: English

When contacting ku33 regarding a data privacy matter, please provide your registered account username and a clear description of your request or concern so that the support team can route your enquiry to the appropriate team member promptly.