Your Privacy Matters at ku90

1 Introduction

ku90 is committed to protecting the privacy of every player who uses our platform. We recognise that the personal information you share with us is valuable, and we take our responsibility to safeguard it with the utmost seriousness. This Privacy Policy sets out, in transparent and accessible language, exactly how personal data flows through our platform — from the moment you land on ku90.ws to the processing of your withdrawals and beyond.

This policy applies to all personal data collected through the ku90 website at ku90.ws, all associated services including casino games, sports betting, live casino, and slot games, as well as all communications between ku90 and its registered players, including email, live chat, and support tickets.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated into this document by reference. In the event of any conflict between this Privacy Policy and another document, this Privacy Policy shall prevail with respect to matters of personal data handling.

2 Data We Collect

ku90 collects different categories of personal data depending on the nature of your interaction with the platform. The table below summarises the main categories of data we may collect:

3 How We Collect Your Data

ku90 collects personal data through the following means:

3.1 Direct Collection

You provide data directly to us when you register an Account, complete identity verification (KYC), make a deposit or withdrawal, contact our support team, participate in a promotion or survey, or update your Account settings.

3.2 Automated Technical Collection

When you visit ku90.ws, certain technical and usage data is collected automatically through server logs, browser cookies, and similar technologies. This includes your IP address, device identifiers, browser type, and pages visited. This data is used to maintain the security and performance of the platform and to identify unusual or potentially fraudulent access patterns.

3.3 Third-Party Sources

In some circumstances, ku90 may receive personal data about you from third-party sources, including:

• Identity verification and KYC service providers who cross-reference the documents you submit;
• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) who confirm transaction status;
• Fraud prevention and anti-money-laundering (AML) screening services;
• Game studios who report game session data back to the platform for account crediting purposes.

4 Why We Use Your Data

ku90 uses the personal data we collect for the following specific purposes:

• Account Management: To create, maintain, and secure your ku90 Account, including login authentication and account recovery;
• Service Delivery: To process your bets, game sessions, deposits, and withdrawals accurately and promptly;
• Identity Verification (KYC): To verify your identity and age (21+) in accordance with our platform policies before processing significant withdrawals or approving high-value accounts;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, money laundering, underage gambling, multiple-account abuse, and other prohibited conduct;
• Customer Support: To respond to your support queries, complaints, and feedback in a timely and accurate manner;
• Responsible Gaming: To monitor gambling activity patterns that may indicate problem gambling behaviour, and to apply self-exclusion or limit settings where requested or required;
• Promotions & Bonuses: To administer bonus credits, free bets, and promotional offers for which you are eligible, and to verify compliance with bonus terms;
• Marketing Communications: Where you have opted in, to send you promotional offers, tournament announcements, and platform updates via email or SMS;
• Platform Improvement: To analyse usage patterns and player feedback in order to enhance the ku90 platform's performance, user experience, and game library;
• Legal Compliance: To comply with applicable laws and regulations, including responding to lawful requests from regulatory authorities.

5 Legal Basis for Processing

ku90 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted at registration — including account creation, transaction processing, and game delivery;
• Legal Obligation: Processing required to comply with applicable laws, including anti-money-laundering (AML) requirements, age verification obligations, and responses to lawful authority requests;
• Legitimate Interests: Processing carried out to pursue ku90's legitimate business interests, including fraud detection, platform security, customer support, and responsible gaming monitoring — provided these interests do not override your fundamental rights;
• Consent: Processing for marketing communications, optional personalisation features, and any other purpose for which you have given explicit, freely-given consent. You may withdraw consent at any time without detriment to your Account.

6 Data Sharing & Disclosure

6.1 Who We Share Data With

ku90 does not sell your personal data. We may share your personal data with the following categories of third parties, strictly for the purposes described in this Privacy Policy:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard — to process your financial transactions;
• Identity Verification Providers: Third-party KYC services used to verify your identity documents and confirm your eligibility to use the platform;
• Game Studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi — game session data is shared with the relevant studio to deliver the game and credit winnings correctly;
• Fraud & AML Screening Services: Third-party services used to screen transactions and account activity for indicators of fraud or money laundering;
• IT Infrastructure Providers: Cloud hosting, database management, and cybersecurity service providers who process data on our behalf under strict data processing agreements;
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, courts, or regulatory bodies where required by applicable law or in response to a valid legal order.

6.2 International Data Transfers

Some of the third-party service providers with whom we share data may be located outside Bangladesh. Where data is transferred internationally, ku90 takes reasonable steps to ensure that appropriate safeguards are in place to protect your personal data in accordance with this Privacy Policy.

7 Cookies & Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember your preferences, maintain your login session, and gather analytical data about how the site is used.

7.2 Cookies Used by ku90

ku90 uses the following categories of cookies:

• Essential Cookies: Strictly necessary for the platform to function — including session management, login authentication, and security tokens. These cannot be disabled without preventing access to the platform;
• Functional Cookies: Used to remember your preferences such as language settings and display options to improve your experience on return visits;
• Analytical Cookies: Used to gather aggregated, anonymised data about how players navigate the platform, which pages are most visited, and where technical errors occur. This data is used to improve platform performance;
• Fraud Prevention Cookies: Used to detect suspicious behaviour patterns, multiple-account abuse, and automated bot activity.

7.3 Managing Cookies

You may control and manage cookies through your browser settings. Most modern browsers allow you to refuse non-essential cookies, delete existing cookies, or receive a notification before a cookie is placed. Please note that disabling essential cookies will prevent you from logging in to your ku90 Account.

8 Data Retention

ku90 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your Account's active status plus a minimum of five years following Account closure, to comply with AML and record-keeping obligations;
• Transaction Records: Retained for a minimum of five years from the date of each transaction;
• KYC / Identity Verification Documents: Retained for a minimum of five years following Account closure or the completion of the relevant verification process;
• Support Communications: Retained for up to three years from the date of the final communication in each support interaction;
• Marketing Consent Records: Retained for the duration of the consent period plus one year after withdrawal of consent, as evidence of compliance;
• Technical & Usage Data (logs): Typically retained for 12 months for security monitoring purposes, after which they are aggregated or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

9 Data Security

ku90 implements a multi-layered security framework to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• SSL/TLS Encryption: All data transmitted between your browser and the ku90 platform is encrypted using industry-standard SSL/TLS protocols;
• Data-at-Rest Encryption: Sensitive personal data stored on our servers is encrypted at rest using modern encryption standards;
• Access Controls: Access to personal data within the ku90 organisation is restricted to authorised personnel on a strict need-to-know basis, governed by role-based access control policies;
• Firewalls & Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls and real-time intrusion detection systems;
• Regular Security Audits: The ku90 platform undergoes periodic security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited;
• Password Hashing: User passwords are never stored in plain text. They are stored as cryptographic hashes using secure, industry-standard hashing algorithms.

10 Your Rights

As a player on the ku90 platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with your Account username and a description of your request. We will respond within a reasonable timeframe, typically within 30 days.

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is processed;
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you;
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data where we no longer have a legitimate legal basis for retaining it. Note that we may be required to retain certain data for legal and regulatory compliance purposes even following a deletion request;
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while a data accuracy dispute is being resolved;
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly-used, machine-readable format and to request its transfer to another service provider where technically feasible;
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests, though we may be entitled to continue processing if we can demonstrate compelling grounds;
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

11 Children & Minors

ku90 employs age verification checks during the registration process and through KYC document review to prevent minors from accessing the platform. If you believe a minor has registered on ku90, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

Parents and guardians are encouraged to use parental control software to help prevent underage access to online gambling platforms. ku90 supports responsible access controls and takes the protection of minors extremely seriously.

12 Third-Party Links

The ku90 platform may, from time to time, reference third-party service providers such as payment processors and game studios by name. ku90 is not responsible for the privacy practices of these third-party entities, and this Privacy Policy does not apply to their platforms or services. We encourage you to review the privacy policies of any third-party services you interact with in connection with using ku90.

13 Changes to This Privacy Policy

ku90 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they meaningfully affect how we collect, use, or share your personal data — we will notify registered Players via their registered email address or via an in-platform notification at least seven (7) days before the changes take effect.

The "Effective Date" at the top of this Privacy Policy will be updated each time a new version is published. We encourage you to review this Privacy Policy periodically to stay informed about how ku90 protects your personal data. Your continued use of the platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact the ku90 data support team:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Privacy Request — [Your Account Username]"
• Support Hours: 24 hours a day, 7 days a week
• Response Time: Data-related requests are handled within 30 days of receipt
• Language: English

We are committed to resolving all privacy-related queries promptly and transparently. If you are not satisfied with our response, you may escalate your concern in writing to our senior compliance team by clearly marking your correspondence as an escalated privacy complaint.