Your Privacy Matters to bku9

bku9 ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with our online betting and gaming services. This Privacy Policy sets out in clear, plain English how we collect, use, store, share, and ultimately delete the personal data we hold about you.

This policy applies to all personal data processed in connection with the bku9 platform, including data collected during the account registration process, during active use of betting and gaming services, during customer support interactions, and during payment processing. It covers data collected through the bku9 website at bku9.io and through any mobile-optimised version of the platform accessed via a browser.

We process personal data because it is necessary to deliver the services you have requested, to meet our legal obligations under Bangladesh law, and — where you have given explicit consent — to communicate promotional information about bku9 products and services. We process personal data only for the specific, documented purposes described in this policy and do not repurpose data without first notifying you and, where required, obtaining fresh consent.

If you are accessing the platform on behalf of another person — for example, if you are a payment account holder whose details are used by a registered player — this policy also governs how we handle your data, to the extent that it comes into our possession through normal platform operations.

For the purposes of this Privacy Policy, the data controller — meaning the entity that determines why and how your personal data is processed — is bku9, the operator of the online betting and gaming platform at bku9.io, serving players based in Bangladesh.

All enquiries, data subject rights requests, and privacy complaints should be directed to the bku9 Data Protection contact point:

• Email (Privacy Enquiries): [email protected] — please mark the subject line "Privacy Request"
• Response Time: We will acknowledge receipt of any privacy-related request within 5 business days (Bangladesh Standard Time, UTC+6) and will provide a substantive response within 30 calendar days.

Where bku9 engages third-party service providers (for example, payment processors, identity verification services, or game providers) who process personal data on our behalf, those providers act as data processors under contractual arrangements that bind them to handle data only in accordance with our documented instructions and this Privacy Policy.

The categories of personal data bku9 collects are described in the table below. We collect this data either directly from you (when you register, verify your account, or contact support) or automatically (through your use of the platform).

bku9 collects personal data through the following channels:

• Direct Input: Data you enter into forms on the platform — including during registration, account verification, deposit initiation, and support ticket submission. This is the primary source of identity and contact data.
• Automated Collection: Data collected automatically when you access or use the platform, including IP addresses, device identifiers, browser characteristics, and session behaviour data. This data is collected via server logs and first-party cookies (see Section 7).
• Third-Party Verification Services: Where bku9 uses a third-party identity verification provider to cross-reference the documents you submit during KYC, that provider may return a verification score or match confidence level to bku9. The provider does not retain your raw document images beyond their own stated retention period.
• Payment Processors: When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, or a partner bank, the payment processor confirms transaction status to bku9. We receive confirmation data (transaction reference, amount, timestamp, sender mobile number) but do not receive your full mobile wallet credentials or bank PIN.
• Game Providers: Game round outcomes, session durations, and bet values are transmitted to bku9 from game providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, Spribe) for the purposes of account balance management, responsible gaming monitoring, and dispute resolution.

bku9 processes your personal data only where a valid legal basis exists. The table below maps each processing purpose to its corresponding legal basis:

Where processing is based on legitimate interests, bku9 has conducted an assessment to confirm that those interests are not overridden by your fundamental rights and freedoms. Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

bku9 takes a particularly rigorous approach to the handling of payment-related data given its sensitivity. The following principles apply to all payment data processed in connection with your bku9 account:

• Segregation: Payment account details (bKash numbers, Nagad numbers, bank account details) are stored separately from gameplay and betting data, with access restricted to the payments and compliance teams only.
• Verification Matching: The mobile number or bank account name associated with your payment method must match the name on your bku9 account. This matching is performed at the time of your first withdrawal request as part of the KYC process.
• No Third-Party Payment Methods: bku9 does not accept deposits from payment methods registered in a name different from the account holder's name. Deposits received from unmatched payment sources will be returned to the originating account without processing.
• Transaction Records: bku9 maintains records of all deposit and withdrawal transactions for a minimum of five years following the transaction date, in accordance with anti-money laundering record-keeping obligations under Bangladesh law.
• No Storage of PIN or Password: bku9 does not at any point request, receive, or store your bKash PIN, Nagad PIN, mobile banking password, or any other payment authentication credential. All payment authentication is handled directly between you and your payment provider.

bku9 uses cookies and similar client-side technologies to enable core platform functionality, maintain session state, and gather aggregate analytics data. The following categories of cookies are used:

• Essential Cookies: Required for the platform to function correctly. These include session authentication cookies (which keep you logged in during a session), anti-CSRF tokens, and load-balancing cookies. Essential cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: Store your preferences such as preferred language, currency display, and odds format. These cookies are set only when you actively configure a preference in your account settings.
• Analytics Cookies: Collect anonymised data about how visitors navigate the platform, which pages are visited most frequently, and where users encounter errors. This data is used to improve platform design and performance. Analytics cookies do not identify you personally.
• Responsible Gaming Cookies: Track session duration data locally to power session time reminders and cool-off period enforcement. These cookies contain no personally identifiable information beyond a hashed session reference.

bku9 does not use third-party advertising cookies, cross-site tracking pixels, social media retargeting tags, or any cookie technology that shares your data with advertising networks. Our cookie usage is limited to the categories above, all of which are first-party (set by bku9's own domain) unless you access game content directly from a provider's embedded frame, in which case the provider may set their own functional cookies for game state management.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will prevent you from logging in or using core platform features. Disabling functional cookies will reset your saved preferences on each visit.

bku9 does not sell, rent, or otherwise commercially transfer your personal data to any third party. We share personal data with third parties only in the following limited and documented circumstances:

• Payment Processors (bKash, Nagad, Rocket, Upay, partner banks): We share the transaction details necessary to execute your deposit or withdrawal. Payment processors receive your registered name, transaction amount, and the payment reference required to route the payment. They do not receive your betting history or identity documents.
• Identity Verification Providers: During KYC, we share the identity documents you submit with a contracted verification service provider. That provider uses the documents solely to return a verification outcome to bku9 and is contractually prohibited from using your data for any other purpose.
• Game Technology Providers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, Spribe): Game providers receive a pseudonymous player identifier and session token necessary to launch game sessions and record game outcomes. They do not receive your full name, NID number, or payment details.
• Law Enforcement and Regulatory Bodies: Where bku9 receives a valid, legally binding request from a Bangladesh court, law enforcement agency, or regulatory authority, we will disclose the requested data to the extent strictly necessary to comply with that legal obligation. Where legally permissible, we will notify the affected account holder before disclosure.
• Professional Advisers: bku9's legal advisers, auditors, and fraud investigation consultants may access personal data on a strictly need-to-know basis, subject to binding confidentiality agreements.

bku9 serves players based in Bangladesh. The majority of data processing occurs within data centre infrastructure located in the Asia-Pacific region. In certain cases, personal data may be processed by our contracted service providers on servers located outside Bangladesh — for example, where a game provider's authentication infrastructure is hosted in a European or Southeast Asian jurisdiction.

Where personal data is transferred outside Bangladesh, bku9 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to the protections described in this Privacy Policy. These safeguards include:

• Standard contractual clauses incorporated into data processing agreements with third-party providers, requiring them to process data only in accordance with bku9's documented instructions.
• Technical safeguards including end-to-end encryption of data in transit and at rest.
• Contractual restrictions preventing service providers from sub-processing personal data to further third parties without bku9's prior written consent.

If you would like further information about the specific safeguards in place for any particular data transfer, please contact us at [email protected] marking your enquiry "International Transfer Query".

bku9 retains personal data for only as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Bangladesh law. The following retention schedules apply:

When a retention period expires, data is deleted or anonymised in a manner that makes re-identification impossible. Anonymised data — from which all identifying information has been irreversibly removed — may be retained beyond these periods for aggregate statistical analysis and platform improvement purposes.

• Right of Access: You may request a copy of all personal data bku9 holds about you, together with information about how that data is being processed. This is commonly known as a Subject Access Request (SAR).
• Right to Rectification: If any of the personal data bku9 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Identity data corrections will require supporting documentation.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to our legal obligation to retain certain data (see Section 10).
• Right to Restrict Processing: You may request that bku9 limit its processing of your personal data in certain circumstances — for example, while a dispute about accuracy is being investigated.
• Right to Data Portability: You may request a copy of the personal data you provided to bku9 in a structured, commonly used, machine-readable format (CSV or JSON). This right applies to data processed on the basis of your consent or a contract.
• Right to Object: You may object to processing carried out on the basis of bku9's legitimate interests. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Marketing Consent: Where you have consented to receive promotional communications from bku9, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of communications sent prior to withdrawal.

Please note that exercising some of these rights — particularly the right to erasure or restriction — may affect your ability to continue using the bku9 platform, as certain data is necessary to maintain and operate your account under the Terms and Conditions.

If bku9 discovers or is notified that a registered account belongs to a person under the age of 21, the following actions will be taken immediately:

1. The account will be suspended without prior notice pending investigation.
2. All funds deposited by the underage account holder will be returned to the originating payment method, net of any winnings (winnings generated by an underage account are not payable).
3. All personal data associated with the underage account will be deleted as promptly as our legal obligations permit, subject to any law enforcement or anti-money laundering hold requirements.
4. If the account was accessed using another person's identity documents, bku9 reserves the right to report the matter to the relevant authorities.

Parents and guardians who believe that a minor in their care has registered on the bku9 platform should contact [email protected] immediately, marked "Underage Account Report". bku9 will investigate and respond within 24 hours.

bku9 strongly encourages parents and guardians to make use of parental control software to restrict access to gambling websites. Free parental control tools are available from a number of providers and can be configured to block access to online gaming platforms at the device or network level.

bku9 employs a layered security architecture to protect personal data from unauthorised access, accidental loss, destruction, or alteration. Our technical and organisational security measures include:

• Transport Encryption: All data transmitted between your device and bku9 servers is encrypted using TLS 1.2 or higher. Outdated protocols (SSLv3, TLS 1.0, TLS 1.1) are disabled at the server level.
• Data at Rest Encryption: Sensitive personal data fields — including identity document images, NID numbers, and payment account references — are encrypted at rest using AES-256 encryption within our database infrastructure.
• Access Controls: Access to production systems containing personal data is restricted to authorised personnel only, using role-based access controls, multi-factor authentication, and the principle of least privilege. Access logs are maintained and reviewed regularly.
• Password Security: bku9 account passwords are stored as salted cryptographic hashes. bku9 staff cannot retrieve your password in plain text — only you know it. If you forget your password, a reset link is issued to your registered contact details.
• Penetration Testing: bku9's platform infrastructure is subject to regular security assessments by qualified security professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: bku9 maintains a documented security incident response procedure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, bku9 will notify affected users without undue delay and will take all reasonable steps to contain the breach and mitigate its effects.
• Staff Training: All bku9 personnel with access to personal data receive mandatory data protection and security awareness training at least annually.

While bku9 implements robust technical and organisational safeguards, no online platform can guarantee absolute security. You play an important role in protecting your own account: use a strong, unique password; enable two-factor authentication where available; never share your login credentials with any third party; and contact [email protected] immediately if you suspect unauthorised access to your account.

bku9 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform functionality. When material changes are made to this policy, we will notify registered account holders by email to their registered address or by a prominent notice displayed upon their next login to the platform, at least 7 days before the changes take effect.

The "Last Updated" date displayed at the top of this policy will be revised each time changes are made. The version of this policy in force on the date of any particular data processing activity will govern that activity, except where a superseding version has been communicated to you and the required notice period has elapsed.

Your continued use of the bku9 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not agree to the revised Privacy Policy, you should close your account and cease using the platform before the revised policy takes effect. Account closure requests submitted in connection with a Privacy Policy update will be processed promptly and without any additional requirement to wager outstanding bonus balances.

Previous versions of this Privacy Policy are archived and can be provided upon request by contacting [email protected].

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about bku9's data handling practices, please contact us using the details below. All privacy communications must be in English. Response times are measured in Bangladesh Standard Time (BST, UTC+6).

• Privacy and Data Rights Enquiries: [email protected] — subject line "Privacy Request" — response within 30 calendar days
• Security Incidents and Suspected Breaches: [email protected] — subject line "Security Incident" — acknowledged within 4 hours
• Underage Account Reports: [email protected] — subject line "Underage Account Report" — response within 24 hours
• General Support: [email protected] — response within 24 hours

This Privacy Policy was last reviewed and updated on 1 January 2026. By continuing to use the bku9 platform after this date, you confirm your acknowledgement of the data practices described in this document.