cku9 Privacy Policy — How We Handle Your Personal Data

1. Introduction

cku9 ("we", "us", "our", "the Platform") is committed to protecting the privacy of every player who uses the cku9 platform at https://cku9.io. This Privacy Policy describes the categories of personal data we collect, the purposes for which we process that data, who we may share it with, how long we retain it, and the rights you hold in relation to your data.

This policy applies to all players who register an account with cku9, visit the cku9 website, use any cku9 mobile or web-based interface, contact cku9 support, or otherwise interact with the cku9 platform. It applies regardless of the device or connection type you use to access the platform.

cku9 operates primarily to serve players based in Bangladesh. All data-handling practices described in this policy are designed to be consistent with generally accepted data protection principles, including data minimisation, purpose limitation, storage limitation, integrity, and confidentiality.

If you have questions about any aspect of this policy before you register, or at any point during your use of cku9, you are welcome to contact our support team using the details provided in Section 13 of this document.

2. Data We Collect

cku9 collects personal data through several channels: information you provide directly during registration and account use, data generated automatically by your use of the platform, and data received from trusted third-party partners such as payment providers and identity verification services.

The following table summarises the main categories of personal data we collect and the primary source of each:

We do not knowingly collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or criminal records unless specifically required for legal compliance purposes. If such data is ever required, we will explain the purpose and obtain your explicit consent at that time.

3. How We Use Your Data

cku9 uses the personal data we collect for the following purposes:

• Account creation and management: To register your cku9 account, authenticate your identity at login, and manage your account settings and preferences.
• Identity verification (KYC): To verify that you are who you say you are, that you are aged 21 or over, and that your account complies with our anti-money-laundering obligations.
• Payment processing: To process your deposits and withdrawal requests via bKash, Nagad, Rocket, Upay, and supported bank transfer channels, and to maintain an accurate transaction record.
• Platform delivery: To provide you with access to all cku9 games and betting markets including cricket, slots, casino, and color prediction, and to personalise your platform experience based on your activity.
• Customer support: To respond to your enquiries, resolve disputes, and maintain a record of our communications with you.
• Security and fraud prevention: To detect and prevent unauthorised account access, fraudulent transactions, collusion, and bonus abuse.
• Legal compliance: To meet our obligations under applicable anti-money-laundering, financial crime prevention, and data protection standards.
• Marketing communications: To send you relevant promotional offers, bonus notifications, and platform updates — but only where you have opted in to receive such communications. You may withdraw consent at any time via your account settings or by contacting support.
• Platform improvement: To analyse aggregate usage patterns, identify technical issues, test new features, and continuously improve the cku9 platform and user experience.
• Responsible gaming monitoring: To identify patterns of play that may indicate problematic gambling behaviour and to prompt or apply responsible gaming interventions in accordance with our Responsible Gaming policy.

We do not use your personal data to make fully automated decisions that have a legal or similarly significant effect on you without a human review step being available.

4. Legal Basis for Processing

cku9 processes personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual necessity: Processing required to register and manage your account, process payments, and deliver the platform services you have requested.
• Legal obligation: Processing required to comply with anti-money-laundering regulations, identity verification requirements, and other applicable legal obligations.
• Legitimate interests: Processing carried out for the purposes of fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where those interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and certain cookie-based tracking activities, where you have given clear, specific, and freely withdrawable consent.

Where we rely on consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Cookies & Tracking Technologies

cku9 uses cookies and similar tracking technologies to operate the platform, maintain your session, remember your preferences, and gather analytical data on how the platform is used. The main categories of cookies used are:

• Strictly necessary cookies: Required for the platform to function. These include session management cookies that keep you logged in during your visit. They cannot be disabled without affecting platform functionality.
• Functional cookies: Store your preferences such as language settings, display options, and game filters so that you do not need to reset them on each visit.
• Analytics cookies: Collect anonymised data about how players interact with the platform — which pages are most visited, where users drop off, and how features are used. This data helps us improve the platform experience.
• Security cookies: Help detect and prevent fraudulent access, bot activity, and suspicious session behaviour.

You can manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will affect your ability to use the platform, as session management relies on them. Analytics and functional cookies can be disabled without preventing you from accessing your account.

6. Data Sharing & Third Parties

cku9 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share data only in the following limited and controlled circumstances:

• Payment processing partners: We share necessary transaction data with payment providers including bKash, Nagad, Rocket, Upay, and supported banking institutions solely to process your deposit and withdrawal requests.
• Identity verification providers: Where third-party KYC or document verification tools are used, we share the minimum necessary data to complete verification. These providers are contractually bound to handle data securely and not use it for any other purpose.
• Game technology providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session and bet data necessary to deliver their games on the cku9 platform. These are governed by data processing agreements.
• Customer support tools: Live chat and support-ticket platforms used by cku9's support team process communication data. Access is limited to authorised support staff only.
• Legal and regulatory authorities: We will disclose personal data to law enforcement, courts, or regulators where required to do so by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to protect the safety or legal rights of cku9 or third parties.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of cku9's business assets, player data may form part of the transferred assets. We will notify affected players by email and via the platform before any such transfer takes place.

All third parties with whom cku9 shares personal data are required to maintain appropriate technical and organisational security measures and to process data only for the specified purpose.

7. Payment Data

cku9 handles payment data with an additional layer of care given its sensitive nature. When you make a deposit or submit a withdrawal request using bKash, Nagad, Rocket, Upay, or a bank transfer, the following applies:

• Mobile wallet numbers (bKash, Nagad, Rocket, Upay) are stored in encrypted form and are only used to match transactions to your account and to process approved withdrawal requests.
• cku9 does not store your mobile banking PIN, OTP codes, or full bank account credentials. These are entered directly into your payment provider's interface — not into cku9's systems.
• Transaction reference IDs provided by your payment provider are stored to allow reconciliation of your deposit and withdrawal history.
• All financial data transmitted between cku9 and payment providers is encrypted in transit using TLS 1.2 or higher.
• Payment data is retained for the period specified in Section 8 (Data Retention) to meet transaction record-keeping requirements.

If you notice any unexplained transaction on your cku9 account, contact our support team immediately via live chat. Our team is available 24 hours a day, 7 days a week.

8. Data Retention

cku9 retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account plus a minimum of five (5) years following account closure, to meet anti-money-laundering record-keeping requirements.
• Transaction and bet history: Retained for a minimum of five (5) years from the date of each transaction to satisfy financial record-keeping obligations.
• KYC verification documents: Retained for a minimum of five (5) years following the completion of verification or account closure, whichever is later.
• Customer support communications: Retained for a maximum of three (3) years following resolution of the relevant support case, unless the matter is subject to ongoing dispute or legal proceedings.
• Analytics and usage data: Aggregated or anonymised analytics data may be retained indefinitely as it no longer constitutes personal data. Raw usage logs are retained for a maximum of 24 months.
• Marketing preference records: Retained for the duration of your account to document your consent or opt-out status.

When data is no longer required, it is securely deleted or anonymised in a manner that prevents reconstruction of the original personal data.

9. Your Rights

As a cku9 player you have the following rights in relation to your personal data. To exercise any of these rights, contact the cku9 support team using the details in Section 13. We will acknowledge your request within 72 hours and aim to resolve it within 30 days.

• Right of access: You may request a copy of the personal data cku9 holds about you, including what categories of data are stored, how they are used, and who they have been shared with.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it.
• Right to erasure: In certain circumstances you may request that we delete your personal data. This right is subject to limitations where retention is required by law (e.g., AML record-keeping obligations).
• Right to restriction of processing: You may request that we temporarily restrict the processing of your data while a dispute about accuracy or the lawfulness of processing is being resolved.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request a structured, machine-readable export of your personal data.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring purposes, unless cku9 can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal does not affect past processing.

10. Data Security

cku9 implements a range of technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• Transport security: All data transmitted between your device and the cku9 platform is encrypted using 256-bit SSL/TLS protocols. The platform is served exclusively over HTTPS.
• Storage security: Player data is stored on secured servers protected by firewalls, intrusion detection systems, and access control lists. Physical access to server infrastructure is restricted to authorised personnel.
• Access controls: Internal access to personal data is granted only to staff who require it to perform their specific job functions. Access is role-based, logged, and subject to regular review.
• Password security: Account passwords are stored using one-way cryptographic hashing. cku9 cannot retrieve or view your plain-text password. Support staff will never ask you for your password.
• Security audits: The cku9 platform undergoes regular security reviews to identify and address potential vulnerabilities before they can be exploited.
• Incident response: In the event of a confirmed data security incident that poses a material risk to players, cku9 will notify affected players promptly and outline the steps taken to contain and remediate the breach.

While cku9 takes all reasonable steps to protect your data, no platform can guarantee absolute security. You also have a responsibility to protect your account by using a strong, unique password, not sharing your credentials, and logging out of shared devices after each session.

11. Children & Minors

The cku9 platform is strictly for adult players. The minimum age to register and use cku9 is 21 years for players based in Bangladesh. cku9 does not knowingly collect personal data from any person under the age of 21.

If cku9 discovers or has reasonable grounds to believe that an account is held by a person under the age of 21, that account will be immediately suspended. Any data collected in connection with such an account will be retained only for the minimum period required by law and then securely deleted.

If you are a parent or guardian and believe that a minor in your care has registered a cku9 account, please contact our support team immediately. We will investigate and take appropriate action without delay.

12. Changes to This Privacy Policy

cku9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-handling practices, legal requirements, or platform functionality. The "Last updated" date at the top of this document indicates when the most recent revision was made.

When material changes are made to this policy, cku9 will notify registered players by email to the address associated with their account, and will display a prominent notice on the platform for a reasonable period before the revised policy takes effect. We encourage you to review this policy periodically to remain informed.

Continued use of the cku9 platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you must stop using the platform and contact support to close your account.

13. Contact

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a potential data security concern, please contact the cku9 support team through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the platform's live chat widget
• WhatsApp: Details available in your cku9 account dashboard after login

For data access or erasure requests, please include your registered email address or mobile number and a brief description of your request. We will acknowledge receipt within 72 hours Bangladesh Standard Time (BST, UTC+6) and aim to resolve all data rights requests within 30 calendar days.

This Privacy Policy was last reviewed and updated in January 2026. cku9 is an online gambling platform for adult players aged 21 and above in Bangladesh. Please gamble responsibly.