Privacy Policy — How uukk Protects Your Data

uukk ("we", "us", "the Platform", "uukk.io") is committed to protecting the privacy and personal data of all individuals who interact with our services. This Privacy Policy applies to all users of uukk.io, including registered account holders, prospective players who browse the platform, and any individual who contacts our support team.

This policy governs the collection, storage, use, disclosure, and disposal of personal data processed by uukk in connection with the provision of its online casino, sports betting, and related entertainment services to players primarily located in Bangladesh. Our platform serves players from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other regions of Bangladesh.

This Privacy Policy should be read alongside our Terms and Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this policy and another document, this Privacy Policy shall take precedence on matters relating to the processing of personal data.

This policy was last reviewed and updated on 1 January 2026. We recommend that players revisit this page periodically to remain informed of any changes to our data practices.

For the purposes of applicable data protection law, uukk acts as the data controller in respect of personal data collected through uukk.io. As data controller, uukk determines the purposes for which, and the means by which, personal data is processed.

All data protection enquiries, access requests, and complaints should be directed to the uukk Privacy Team via the contact details provided in Section 14 of this policy. We aim to respond to all privacy-related correspondence within 7 business days of receipt.

uukk collects personal data in several ways: directly from you when you register an account or contact support, automatically when you use our platform, and from third parties where necessary for verification or fraud prevention purposes. The categories of data we collect are described below.

uukk does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, or data concerning health or sexual orientation, except where expressly required for responsible gaming or age-verification purposes and only with your explicit consent.

uukk uses personal data collected from players for clearly defined and limited purposes. We do not use your data for purposes that are incompatible with those stated below without obtaining your prior consent. The primary purposes for which we use personal data are as follows:

• Account Registration and Management: To create and maintain your uukk player account, verify your identity, and communicate important account-related information such as password changes, deposit confirmations, and policy updates.
• KYC and Identity Verification: To verify that you meet the age requirement (21+) and satisfy our Know Your Customer obligations, including confirming the legitimacy of the payment methods you register.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain accurate financial records of all transactions on your account.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as described in our Terms and Conditions.
• Responsible Gaming Monitoring: To identify indicators of problem gambling behaviour, deliver responsible gaming tools, and fulfil our duty of care to players who may be at risk.
• Customer Support: To respond to your enquiries, investigate complaints, and resolve account disputes in a timely and fair manner.
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving the performance, usability, and content of the uukk platform.
• Legal and Regulatory Compliance: To fulfil any legal obligations that require us to retain, process, or disclose personal data, including responding to lawful requests from competent authorities.
• Marketing Communications (opt-in only): To send you information about uukk promotions, bonuses, and new games, where you have explicitly opted in to receive such communications. You may withdraw consent at any time by contacting support.

uukk processes personal data on one or more of the following legal grounds, depending on the nature of the processing activity:

• Contractual Necessity: Processing is necessary to perform the contract between you and uukk — specifically, to provide the gaming and betting services you have registered to use, to process payments, and to manage your account.
• Legitimate Interests: Processing is necessary for the legitimate interests pursued by uukk, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided those interests are not overridden by your rights and interests.
• Legal Obligation: Processing is necessary to comply with a legal obligation to which uukk is subject, such as retaining financial transaction records or responding to lawful requests from competent authorities.
• Consent: Where processing is not covered by the above grounds — for example, for optional marketing communications — uukk will obtain your explicit consent before proceeding. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

uukk uses cookies and similar tracking technologies on uukk.io to ensure the platform functions correctly, to maintain your login session, to remember your preferences, and to gather anonymised analytics data that helps us improve the platform experience.

The types of cookies used on uukk.io are as follows:

• Strictly Necessary Cookies: These cookies are essential for the platform to operate. They enable core functions such as session management, login persistence, and security token handling. These cookies cannot be disabled without breaking the platform.
• Functional Cookies: These cookies remember your preferences — such as your preferred language or display settings — to provide a more personalised experience on return visits.
• Analytics Cookies: These cookies collect anonymised information about how visitors use uukk.io, including which pages are visited most frequently and how users navigate between sections. This information is used solely to improve the platform.
• Security Cookies: These cookies assist in identifying unusual or potentially fraudulent account activity by associating a session with a specific device fingerprint and IP address.

uukk does not use third-party advertising or cross-site tracking cookies. You may configure your browser to refuse certain categories of cookies; however, disabling strictly necessary cookies will prevent you from logging in or using the platform effectively.

uukk does not sell, rent, or trade your personal data. We share your personal data with third parties only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment Processors: bKash, Nagad, Rocket, and Upay receive transaction data (including account numbers and amounts) solely to process your deposit and withdrawal requests. These providers have their own privacy policies and operate under their own data protection obligations.
• Game Content Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and session data for the purpose of delivering their games on the uukk platform. These providers do not receive your full identity data.
• Identity Verification Services: Where uukk uses a third-party KYC verification provider, identity documents submitted during verification may be processed by that provider on our behalf. Such providers are contractually bound to process data only for the verification purpose and not to retain or repurpose it.
• Fraud Prevention and Security Partners: Anonymised or pseudonymised data may be shared with fraud detection services to identify and prevent patterns of abuse across the industry.
• Legal and Regulatory Authorities: uukk may disclose personal data to competent authorities, courts, or law enforcement agencies where required to do so by a legally binding order, regulation, or other enforceable legal process.

uukk places particular emphasis on the security of financial and payment data. All payment transactions on uukk.io are processed through established Bangladeshi mobile financial services — primarily bKash, Nagad, Rocket, and Upay — which operate under their own security and data protection frameworks.

uukk does not store your full bKash, Nagad, Rocket, or Upay account credentials on its servers. When you register a payment method, we store only a tokenised or masked reference to that account (for example, the last four digits of your registered mobile number) sufficient to identify which payment method is associated with your uukk account. Full account credentials are handled exclusively by the respective payment provider.

All payment-related data transmitted between your device and uukk.io is protected by 256-bit SSL encryption. Transaction records are retained for the period specified in Section 9 of this policy and are accessible only to authorised uukk personnel and, where required, to competent legal authorities.

uukk retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following table summarises our standard retention periods by data category:

Once the applicable retention period has elapsed and there is no overriding legal reason to retain the data further, uukk will securely delete or anonymise the relevant personal data. Anonymised data — from which all identifying information has been irreversibly removed — may be retained indefinitely for statistical and analytics purposes.

uukk implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Transport Encryption: All data transmitted between your browser or device and uukk.io is encrypted using TLS 1.2 or higher (256-bit SSL). This protects your data in transit from interception by third parties.
• Encryption at Rest: Personal data and financial records stored on uukk servers are encrypted at rest using AES-256 encryption standards.
• Access Controls: Access to personal data is strictly limited to authorised uukk personnel on a need-to-know basis. All internal access is logged and subject to regular audit review.
• Intrusion Detection: uukk operates continuous network monitoring and intrusion detection systems to identify and respond to anomalous access patterns in real time.
• Secure Development Practices: Our platform is built and maintained following secure coding principles, with regular security assessments and penetration testing conducted by qualified professionals.
• Incident Response: In the event of a data security incident that may affect player data, uukk will take immediate remedial action and will notify affected players via their registered email address within a reasonable timeframe.

While uukk takes all reasonable precautions to secure your data, no digital system can guarantee absolute security. You also play an important role in protecting your account: keep your password confidential, do not share your login credentials, and contact support immediately if you suspect unauthorised access to your account.

As a uukk account holder or platform user, you hold a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact the uukk Privacy Team at [email protected] with a clear description of your request and sufficient information to verify your identity.

• Right of Access: You have the right to request a copy of the personal data that uukk holds about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: If any personal data held about you is inaccurate or incomplete, you have the right to request that it be corrected or updated promptly.
• Right to Erasure: Subject to certain legal retention obligations, you have the right to request the deletion of your personal data. Where legal obligations require us to retain certain data (such as financial records), we will inform you of this at the time of your request.
• Right to Restriction: You have the right to request that the processing of your personal data be restricted in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests, including for direct marketing purposes. We will cease processing upon receipt of a valid objection unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, for optional marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you may request that we provide your personal data in a structured, machine-readable format.

uukk will respond to all valid privacy rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days, in which case we will inform you of the extension and the reason for it within the initial 30-day window.

uukk operates a strict 21+ policy. The platform is not directed at, and is not intended for use by, any individual under the age of 21. uukk does not knowingly collect personal data from minors. If we become aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor in your care has registered an account or provided personal data to uukk, please contact us immediately at [email protected]. We will investigate the matter promptly and take appropriate action, including returning any deposited funds to the payment source used.

uukk reserves the right to update or amend this Privacy Policy at any time. Changes may be necessary to reflect updates to our services, changes in applicable law, improvements to our data practices, or feedback from players and regulators. All amendments will be published on this page with an updated "Last Updated" date at the top of the document.

Where a change to this Privacy Policy is material — for example, where we introduce a new category of data collection or a new purpose for processing existing data — uukk will provide advance notice to registered account holders via their registered email address at least 14 days before the change takes effect. Continued use of the uukk platform after the effective date of a material change constitutes acceptance of the revised policy.

For minor or administrative changes — such as corrections to formatting, clarifications that do not alter the substance of any provision, or updates to contact details — uukk may update this page without issuing individual notifications. We therefore encourage all players to review this policy periodically.

Prior versions of this Privacy Policy are available on request by contacting [email protected]. We retain archived copies of all previous policy versions for a minimum of 5 years.

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about how uukk handles your personal data, please contact our Privacy Team using the details below. All communications must be submitted in English to ensure prompt handling by our support team.

When submitting a privacy request or complaint, please include your registered account username, a clear description of your request or concern, and any relevant reference numbers or dates. This will allow our team to locate your records and respond as efficiently as possible.

uukk takes all privacy complaints seriously and is committed to resolving them fairly and transparently. If you are not satisfied with the outcome of your complaint after engaging with our internal process, you may seek independent advice or pursue alternative dispute resolution through a recognised third-party arbitration service.

Please note that all contact with uukk — including via email — must be in English. Our support team operates in English to serve our Bangladesh-based player community and to maintain consistent, accurate records of all privacy-related correspondence.