Privacy Policy — How ku222 Protects Your Data

ku222 collects personal information through several channels: directly from you when you register an account, interact with the platform, contact support, or complete identity verification; automatically through your use of the platform; and in limited cases from third-party sources such as payment processors and identity verification partners.

1.1 Information You Provide Directly

When you register a ku222 account or interact with the platform, you may provide the following categories of personal information:

• Identity Data: Full legal name, date of birth, National Identity Card (NID) number, passport number, or other government-issued identification details submitted during KYC verification.
• Contact Data: Email address, Bangladeshi mobile phone number, and residential address.
• Financial Data: Mobile Financial Service (MFS) account references (bKash, Nagad, Rocket, Upay), bank account details where applicable, transaction history, deposit and withdrawal records.
• Account Data: Username, encrypted password, account preferences, communication preferences, and self-imposed responsible gaming limits.
• Correspondence Data: The content of any messages, queries, complaints, or other communications you send to ku222 via live chat, email, or any other supported channel.

1.2 Information Collected Automatically

When you access ku222.bet or our mobile-optimised interface, certain technical data is collected automatically:

• Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
• Usage Data: Pages visited, features accessed, game sessions initiated, wagers placed, session duration, click paths, and referral source.
• Location Data: General geographic location inferred from your IP address. ku222 does not collect precise GPS-level location data.
• Cookie Data: Information collected through cookies and similar tracking technologies as described in Section 4 of this policy.

1.3 Information from Third Parties

In limited circumstances, ku222 may receive personal data about you from third-party sources, including:

• Payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard) confirming transaction status and account references;
• Identity verification and KYC service providers who assist in confirming the authenticity of documents submitted by users;
• Fraud prevention and security screening services that flag accounts associated with known fraudulent activity.

All third-party data sources used by ku222 are subject to their own privacy policies and are engaged under data processing agreements that require them to handle personal data responsibly.

ku222 does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own commercial or marketing purposes. Personal data is shared externally only in the specific, limited circumstances described below, and only to the extent necessary for the stated purpose.

3.1 Service Providers and Data Processors

ku222 engages a small number of carefully selected third-party service providers who process personal data on our behalf and under our instruction. These include:

• Payment Processing Partners: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks (including Dutch-Bangla Bank, City Bank, BRAC Bank) process transaction data to facilitate deposits and withdrawals.
• Identity Verification Providers: Third-party KYC services that validate government-issued identity documents submitted by users during account verification.
• Game Software Providers: Licensed game studios and providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive session data necessary to deliver their games within the ku222 platform environment. These providers operate under their own regulatory licences and data protection obligations.
• IT Infrastructure and Security Providers: Cloud hosting, DDoS protection, and cybersecurity service providers who assist in maintaining platform availability and security.

All service providers engaged by ku222 are required to process personal data only in accordance with ku222's instructions and to maintain appropriate technical and organisational security measures.

3.2 Legal and Regulatory Disclosure

ku222 may disclose personal data to competent legal or regulatory authorities where required to do so by applicable law, court order, or binding regulatory direction. Such disclosures are made only to the extent required and after legal review where practicable.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of ku222's assets, personal data held by the platform may be transferred to the acquiring entity. Users will be notified in advance of any such transfer and of any material changes to the terms under which their data is processed.

ku222 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our internal compliance obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an individual. Where anonymisation is applied, the resulting aggregated data may be retained indefinitely for statistical purposes.

5.1 Data Storage Location

ku222 stores personal data on servers located in secure data centres. All storage environments are protected by physical access controls, encryption at rest, and regular security auditing. ku222 takes reasonable steps to ensure that any cross-border data transfers are subject to appropriate safeguards.

The security of your personal data is a top priority at ku222. We implement a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure. While no digital system can guarantee absolute security, ku222's security programme reflects current industry best practices for the online gaming sector.

7.1 Technical Security Controls

• Transport Encryption: All data transmitted between your browser or app and ku222's servers is encrypted using TLS 1.2 or higher (256-bit SSL). You can verify this by checking for the padlock icon in your browser's address bar.
• Encryption at Rest: Sensitive data stored in ku222's databases — including identity document references, financial records, and authentication credentials — is encrypted at rest using AES-256 encryption.
• Password Security: User passwords are never stored in plain text. ku222 applies industry-standard cryptographic hashing with salting to all password storage.
• Two-Factor Authentication (2FA): ku222 supports and encourages the use of SMS OTP-based two-factor authentication for all registered accounts. 2FA provides an additional layer of protection against unauthorised account access.
• Intrusion Detection and Monitoring: ku222's infrastructure is monitored continuously for anomalous access patterns, brute-force attempts, and other indicators of compromise.

7.2 Organisational Security Controls

• Access to personal data within ku222's operations team is restricted on a strict need-to-know basis, governed by role-based access controls.
• All staff and contractors with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• ku222 conducts periodic security reviews and vulnerability assessments of its platform infrastructure.

7.3 Reporting a Security Concern

If you believe your ku222 account has been accessed without your authorisation, or if you identify a potential security vulnerability on the platform, please contact our support team immediately via live chat or at [email protected]. We treat all security reports as high priority and will respond promptly to investigate and contain any confirmed incident.