ku998 Privacy Policy

This Privacy Policy ("Policy") describes how ku998 ("we", "us", "the Platform") collects, processes, stores, and shares personal information provided by users ("you", "Player", "User") of the ku998 online casino and sports betting platform, accessible at ku998.pro and its associated subdomains. This Policy forms part of the ku998 Terms and Conditions and should be read alongside them. By registering an account or using any service offered through the ku998 platform, you acknowledge that you have read and understood this Policy.

ku998 is committed to protecting the privacy of its players and handling all personal data with care, transparency, and in compliance with applicable data protection standards. We collect only the information that is necessary to operate the platform safely, process transactions, verify account eligibility, and comply with our legal and regulatory obligations. We do not sell your personal data to third parties under any circumstances.

Information We Collect

ku998 collects personal information from users through two primary channels: information you provide directly when registering and using the platform, and information generated automatically through your interaction with the platform's services. The categories of personal data we collect include the following:

• Identity information: full name, date of birth, and gender as provided during registration and as required for age and identity verification.
• Contact information: mobile phone number and email address used to register your account and through which we communicate with you.
• Location information: your city or district of residence within Bangladesh, as provided during registration. Precise GPS location is not collected.
• Financial and payment information: your mobile wallet identifier (bKash or Nagad account number), bank account details where applicable, deposit and withdrawal transaction records, and account balances. Full payment credentials (e.g. bKash PINs) are never stored by ku998 — these are processed exclusively by the payment providers.
• Gameplay and activity data: betting history, game session durations, game preferences, win/loss records, bonus usage, and responsible gaming tool interactions (e.g. deposit limit settings, self-exclusion requests).
• Technical and device data: IP address, device type, operating system, browser type, screen resolution, session timestamps, and referring URLs. This data is collected automatically and is used for security monitoring, fraud detection, and platform performance optimisation.

Where ku998 requires you to provide identity verification documents — such as a national ID card or passport — as part of the KYC process, those documents are handled with the highest level of security and are used solely for the purpose of verifying your identity and age. They are not used for any marketing or profiling purpose.

Legal Basis for Processing

ku998 processes your personal data only where a valid legal basis exists. The legal bases upon which we rely are:

• Contractual necessity: processing that is required to fulfil our contract with you — specifically to operate your account, process your deposits and withdrawals, and deliver the services you have registered to receive.
• Legal obligation: processing required to comply with applicable law — including age verification, KYC and anti-money laundering requirements, record-keeping obligations, and responses to lawful requests from regulatory or law enforcement bodies.
• Legitimate interests: processing carried out in ku998's legitimate business interests — including platform security, fraud prevention, responsible gaming monitoring, and business analytics — where those interests are not overridden by your rights and freedoms.
• Consent: processing based on your explicit consent — primarily for marketing communications and for certain optional data uses. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Payment Data and Third-Party Processors

When you make a deposit or submit a withdrawal request on the ku998 platform, you will interact directly with the mobile wallet or banking interface of your chosen payment provider (bKash, Nagad, Rocket, Upay, or a partner bank). The actual payment transaction — including any PIN entry, OTP confirmation, or banking authentication — takes place within the payment provider's own secure environment and is governed by that provider's privacy policy.

ku998 receives a transaction confirmation and a reference number from the payment provider following a successful transaction. ku998 does not receive, transmit, or store your mobile wallet PIN, bank account password, or any other payment authentication credential. The payment data that ku998 does retain — including your wallet number and transaction reference — is stored in encrypted form and is used solely for transaction reconciliation, support query resolution, and compliance record-keeping.

Data Retention

ku998 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, as described in this Policy, and to comply with our legal and regulatory obligations. The retention periods we apply are as follows: active account data is retained for the duration of your account's existence plus a minimum of five years following account closure, to meet financial record-keeping requirements. KYC documentation is retained for a minimum of five years from the date of verification. Transaction records are retained for a minimum of five years from the date of the transaction. Communication records (support interactions, complaint correspondence) are retained for three years. Device and technical log data is retained for a maximum of twelve months.

When personal data is no longer required for the purposes described above and no legal obligation requires its continued retention, ku998 will securely delete or anonymise that data in a manner that prevents its reconstruction or re-identification.

Data Security

ku998 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include AES-256 encryption for data at rest, TLS encryption for all data in transit, strict access controls limiting which staff members can access personal data (with access granted on a need-to-know basis only), regular security audits and penetration testing, and real-time intrusion detection and anomaly monitoring systems. All platform traffic is delivered over HTTPS with valid SSL certificates.

While ku998 takes all reasonable steps to safeguard your data, no internet-based platform can guarantee absolute security. In the event of a data security incident that poses a significant risk to your rights and freedoms, ku998 will notify affected users promptly and take all appropriate remedial action. ku998 encourages all users to use strong, unique passwords for their accounts and to enable any additional authentication options made available.

Changes to This Privacy Policy

ku998 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the platform's services. When we make material changes — meaning changes that substantively affect how we collect, use, or share your personal data — we will publish the updated Policy on this page with a revised effective date and will endeavour to notify registered account holders via their registered contact details.

Your continued use of the ku998 platform after any changes to this Policy are published constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed about how ku998 protects your personal data. The effective date at the top of this Policy indicates when it was last updated.