ku77 Privacy Policy

1.1 ku77 is Bangladesh's premier online casino and sports betting platform, operating under the brand name "ku77" and accessible at https://ku77.lol. References in this Privacy Policy to "ku77", "we", "us", or "our" refer to the ku77 Platform and its operating entity.

1.2 ku77 acts as the data controller in respect of the personal information collected from players and visitors to the Platform. This means that ku77 determines the purposes and means by which personal data is processed, and is responsible for ensuring that such processing is carried out lawfully and transparently.

1.3 For any questions relating to this Privacy Policy or to the handling of your personal data, you may contact our support team at [email protected]. Contact details are provided in plain text only and are not clickable links.

2.1 ku77 collects personal data from players and Platform visitors across several categories. The specific data collected depends on how you interact with the Platform and the services you use.

2.2 ku77 does not knowingly collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information unless specifically required by law or expressly provided by the player in connection with a responsible gaming request.

3.1 Direct Collection: The majority of personal data held by ku77 is provided directly by the player during account registration, KYC verification, payment transactions, support interactions, and promotional opt-ins.

3.2 Automated Collection: When you visit or use the ku77 Platform, certain technical and usage data is collected automatically through server logs, session tracking, and browser cookies. This includes IP addresses, device identifiers, and behavioural data such as pages visited and games interacted with.

3.3 Third-Party Sources: ku77 may receive data about you from third-party payment processors (such as bKash, Nagad, and Rocket) in connection with the processing of deposits and withdrawals. We may also receive fraud-screening information from security service providers where we have a legitimate interest in protecting the Platform from abuse.

3.4 KYC Providers: Where identity and age verification is performed by a contracted third-party KYC provider, that provider may return verification outcomes and document status information to ku77 for the purposes of account compliance.

4.1 ku77 processes personal data only where a valid legal basis exists. The primary legal bases relied upon are as follows:

• Contractual Necessity: Processing required to fulfil the Player Agreement, including account management, processing deposits and withdrawals, and providing access to games and betting markets.
• Legal Obligation: Processing required to comply with anti-money-laundering (AML) obligations, age verification requirements, fraud prevention duties, and any applicable reporting requirements.
• Legitimate Interests: Processing carried out to protect the security and integrity of the Platform, prevent fraudulent activity, improve our services through analytics, and manage player communications. ku77 only relies on legitimate interests where those interests are not overridden by your data protection rights.
• Consent: Processing carried out for direct marketing communications and for the use of non-essential cookies, where your explicit opt-in consent has been obtained. Consent may be withdrawn at any time by contacting support or adjusting your account settings.

5.1 ku77 uses the personal data it holds for the following purposes:

• To create, manage, and maintain your Player account.
• To verify your identity and age in compliance with our KYC obligations before processing withdrawals or enabling certain account features.
• To process deposits and withdrawals via supported payment methods including bKash, Nagad, Rocket, Upay, and partner banks.
• To detect, investigate, and prevent fraudulent transactions, account abuse, multi-accounting, and other forms of dishonest conduct.
• To monitor gaming activity for responsible gambling purposes, including identifying patterns that may indicate problem gambling behaviour and offering appropriate interventions.
• To send transactional communications such as deposit confirmations, withdrawal notifications, KYC status updates, and security alerts.
• To send promotional communications — including bonus offers, tournament announcements, and seasonal promotions — where you have opted in to receive such communications.
• To personalise your experience on the Platform, including game recommendations and tailored promotional offers relevant to your gaming preferences.
• To maintain the technical security, performance, and stability of the Platform.
• To comply with all applicable legal, regulatory, and anti-money-laundering obligations.
• To resolve disputes, handle complaints, and provide customer support.

6.1 ku77 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only where necessary and only with the following categories of recipient:

• Payment Processors: Data necessary to process financial transactions is shared with payment service providers including bKash, Nagad, Rocket, Upay, and partner banking institutions. These providers process data under their own privacy policies and are bound by data security obligations.
• KYC and Identity Verification Providers: Identity documents and verification data may be shared with contracted third-party KYC providers for the purposes of age and identity verification. These providers are contractually bound to process data solely for verification purposes.
• Game Providers: Technical session data may be shared with third-party game providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi in order to facilitate the delivery of their games on the Platform. Game providers do not receive financial or full identity data.
• Fraud Prevention and Security Services: Technical identifiers and risk-scoring data may be shared with fraud detection service providers where ku77 has a legitimate interest in protecting the Platform from abuse.
• Legal and Regulatory Authorities: Where required by law, ku77 may disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies. Such disclosures are made only to the extent required and are not carried out voluntarily.
• IT and Infrastructure Service Providers: Data may be processed by contracted cloud hosting and IT infrastructure providers who act as data processors on behalf of ku77 under binding data processing agreements.

6.2 Any third party with whom ku77 shares personal data is required to maintain appropriate technical and organisational security measures and is prohibited from using that data for any purpose beyond what is strictly necessary for the service they provide.

7.1 ku77 uses cookies and similar tracking technologies to operate the Platform effectively, remember your session, and analyse usage patterns. Cookies are small text files placed on your device when you visit the Platform.

7.2 The following categories of cookie are used on the ku77 Platform:

• Essential Cookies: Required for the Platform to function correctly. These include session management cookies that keep you logged in during your visit. Essential cookies cannot be disabled without affecting core Platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players interact with the Platform — including which games are most played, average session durations, and navigation paths. This data is used solely to improve the Platform experience.
• Preference Cookies: Used to remember your account settings and display preferences between sessions.
• Marketing Cookies: Used to identify your visit for the purposes of serving relevant promotional content. These cookies are only set with your explicit consent.

7.3 You may manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling essential cookies may prevent you from accessing certain areas of the Platform.

8.1 ku77 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations.

8.2 The following general retention periods apply:

• Active Account Data: Retained for the duration of your account's active status plus a minimum of five years following account closure, in accordance with anti-money-laundering record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five years following the date of the transaction, or longer where required by applicable financial regulations.
• KYC Documents: Retained for a minimum of five years following account closure or the date of the last transaction, whichever is later.
• Support Communications: Retained for up to three years from the date of the interaction, or longer where the communication relates to an unresolved dispute.
• Marketing Preference Records: Retained for the duration of your account plus one year following account closure, to demonstrate compliance with consent obligations.

8.3 Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data lifecycle procedures.

9.1 ku77 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ku77 servers.
• Encryption of sensitive data fields at rest within our database infrastructure.
• Role-based access controls ensuring that internal staff can only access player data relevant to their specific function.
• Regular security assessments and vulnerability testing of Platform infrastructure.
• Two-factor authentication options for Player accounts to reduce the risk of unauthorised login.
• Contractual security obligations imposed on all third-party data processors.

9.2 While ku77 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is entirely without risk. Players are responsible for maintaining the security of their own account credentials and should notify ku77 immediately if they suspect any unauthorised access to their account.

9.3 In the event of a data breach that is likely to result in a risk to player rights or freedoms, ku77 will notify affected players and take all appropriate remedial steps without undue delay.

10.1 Players have the following rights in relation to their personal data held by ku77. To exercise any of these rights, please contact [email protected] with your account details and a description of your request.

• Right of Access: You may request a copy of all personal data ku77 holds about you, together with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. For name or date of birth corrections, supporting identity documentation may be required.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. This right is subject to ku77's legal and regulatory obligations — data that must be retained for AML or KYC compliance cannot be deleted on request.
• Right to Restriction: You may request that ku77 restrict the processing of your data in specified circumstances, for example while a data accuracy dispute is being resolved.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, or to processing for direct marketing purposes. Objections to direct marketing will always be honoured.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

10.2 ku77 will respond to all data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, and you will be notified of any extension.

11.1 The ku77 Platform is strictly for adults aged 18 and above. ku77 does not knowingly collect personal data from individuals under the age of 18. If we become aware that data has been collected from a minor, the associated account will be immediately closed, all data will be securely deleted to the extent permitted by law, and any funds held will be dealt with in accordance with the ku77 Terms & Conditions.

11.2 If you believe that a minor has registered an account on ku77, please notify us immediately at [email protected]. We take all such reports seriously and will investigate and act promptly.

12.1 ku77 primarily stores and processes data within infrastructure serving the South and Southeast Asian region. In certain circumstances, personal data may be transferred to or accessed from locations outside Bangladesh — for example, where a third-party service provider operates servers in a different country.

12.2 Where personal data is transferred internationally, ku77 ensures that appropriate safeguards are in place to protect the data, including contractual data processing agreements incorporating appropriate data protection clauses. ku77 does not transfer personal data to jurisdictions that do not provide an adequate standard of data protection without first implementing additional protective measures.

13.1 The ku77 Platform may contain references to or integrations with third-party game providers and payment services. While ku77 takes care to partner with reputable organisations, we are not responsible for the privacy practices of any third party. Each third-party provider operates under its own privacy policy, and players are encouraged to review those policies before submitting personal data directly to a third-party service.

13.2 This Privacy Policy applies solely to data collected and processed by ku77 through the Platform at https://ku77.lol. It does not govern any data processed independently by third-party game studios or payment processors.

14.1 ku77 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. The "Effective Date" at the top of this page will be updated whenever a material revision is made.

14.2 Where changes are material and affect the rights of existing players, ku77 will endeavour to notify affected players by email to their registered address prior to the changes taking effect. It is the player's responsibility to ensure their registered email address is current and accessible.

14.3 Continued use of the Platform following publication of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not accept the revised policy, you must close your account and cease using the Platform.

15.1 If you have any questions, concerns, or requests regarding this Privacy Policy or the way your personal data is handled by ku77, please contact our Data Support team using the details below. All contact details are provided as plain text only and are not clickable links.

Email: [email protected]

Support Hours: 24 hours a day, 7 days a week, including all public holidays observed in Bangladesh.

Response Time: ku77 aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 days of receipt.

15.2 For matters relating to your account security, responsible gaming tools, or account closure, please also refer to the Responsible Gaming page for additional guidance and dedicated support options.