Your Privacy Matters at uuubd

1. Information We Collect

uuubd collects personal data that is necessary to operate the Platform, verify your identity, process financial transactions, and comply with applicable legal obligations. The categories of personal data we collect are described below.

1.1 Registration Data

When you create a uuubd account, we collect the following information:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (to verify you meet the 18+ age requirement)
• Email address
• Bangladeshi mobile phone number
• Preferred username and encrypted password
• Residential address (city and district within Bangladesh)

1.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) and Know Your Customer (KYC) obligations, uuubd may collect:

• A copy of your National Identity Card (NID), passport, or driving licence
• A recent utility bill or bank statement as proof of address
• A screenshot or confirmation of your registered bKash, Nagad, or Rocket account as proof of payment method ownership
• A selfie photograph for biometric matching in cases where identity documents cannot be automatically verified

1.3 Financial Transaction Data

When you make deposits or request withdrawals, we record:

• Transaction amounts in Bangladeshi Taka (৳)
• Transaction timestamps (Bangladesh Standard Time, UTC+6)
• Payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank )
• Transaction reference numbers
• Account balance history relevant to dispute resolution

uuubd does not store full card numbers, CVV codes, or full mobile banking PINs. Payment processing is handled by certified third-party payment processors, and only tokenised references are retained by the Platform.

1.4 Technical and Usage Data

When you access the uuubd Platform, our servers automatically collect certain technical information:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Pages visited, features used, and time spent on each section
• Referral source (how you arrived at uuubd)
• Session duration and login/logout timestamps
• Error logs and crash reports

1.5 Communications Data

If you contact uuubd support — via email at [email protected] or through the Platform's live chat — we retain records of those communications, including the content of messages exchanged, the date and time, and the resolution outcome. This data is used for quality assurance, dispute resolution, and staff training.

1.6 Gaming Activity Data

We maintain detailed records of your gaming and betting activity on the Platform, including:

• Games played (slots, live casino, sports betting, crash games)
• Bet amounts, outcomes, and settlement records
• Bonus claims, wagering progress, and promotion participation history
• Self-imposed limits, time-out requests, and responsible gaming tool usage

This data is necessary for regulatory compliance, dispute resolution, the detection of problem gambling patterns, and the delivery of a personalised Platform experience.

2. How We Use Your Data

uuubd processes your personal data on the following legal bases and for the following purposes:

Purpose	Legal Basis	Data Categories Used
Account creation and authentication	Contractual necessity	Registration data, technical data
Identity and age verification (18+)	Legal obligation / contractual necessity	KYC data, registration data
Processing deposits and withdrawals	Contractual necessity	Financial transaction data, KYC data
Fraud prevention and AML compliance	Legal obligation / legitimate interest	All categories
Customer support and dispute resolution	Contractual necessity / legitimate interest	Communications data, gaming activity data
Responsible gaming monitoring	Legal obligation / legitimate interest	Gaming activity data, financial data
Platform improvement and analytics	Legitimate interest	Technical and usage data
Promotional communications (opt-in only)	Consent	Registration data, gaming activity data

uuubd does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Where automated systems flag an account for review (e.g., due to suspected fraud or unusual betting patterns), a qualified member of the uuubd compliance team will conduct a manual review before any action is taken against the account.

3. Data Sharing and Disclosure

uuubd does not sell, rent, or trade your personal data to third parties for commercial purposes. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for each purpose.

3.1 Service Providers and Technology Partners

We engage carefully selected third-party service providers who process data on our behalf under strict contractual data protection obligations. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, and bank-side processors for Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank. These partners receive only the transaction data required to execute payments.
• Identity verification providers: KYC technology partners who assist with automated document scanning and age verification. Document images are shared only for verification and are not retained by the provider beyond the verification period.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified game studios receive pseudonymised session and bet data necessary to operate their games and audit RNG fairness. Full personal identity data is not shared with game providers.
• Cloud hosting and infrastructure providers: uuubd's Platform is hosted on enterprise-grade cloud infrastructure. Hosting providers have access to server-level data but are contractually prohibited from accessing or processing user personal data for any purpose other than providing infrastructure services.
• Customer support platforms: The tools used to operate our live chat and ticketing systems may store copies of support conversations in encrypted form.

3.2 Legal and Regulatory Disclosure

uuubd will disclose personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or other competent authorities where we are legally required to do so — for example, in response to a court order, a mandatory AML suspicious transaction report, or a formal request from a regulatory authority conducting an investigation. In such cases, uuubd will disclose only the minimum data required by the applicable legal obligation.

3.3 Business Transfers

In the event that uuubd undergoes a merger, acquisition, or sale of substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and given the opportunity to delete your account if you do not wish your data to be processed by the new entity, to the extent such notification and choice is legally permissible at the time.

3.4 Aggregate and Anonymised Data

uuubd may share aggregated, anonymised statistical data (such as total player counts by region, average session lengths, or popular game categories) with business partners, research organisations, or the public. This data cannot be used to identify any individual player and is not subject to the restrictions in this Policy.

4. Cookies and Tracking Technologies

uuubd uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse usage, and prevent fraud. A cookie is a small text file stored on your device when you visit the Platform. The types of cookies we use are:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing identifiers. These cannot be disabled without breaking the Platform's core functionality.
• Functional cookies: Remember your preferences such as language setting, last visited game category, and display preferences. These improve your experience but are not essential to Platform operation.
• Analytics cookies: Collect anonymised data about how users navigate the Platform — which pages are visited most, where users drop off, and which features are used. This data is used to improve the Platform. uuubd uses privacy-respecting analytics tools that do not share raw user data with advertising networks.
• Security and fraud prevention cookies: Help uuubd identify unusual login patterns, detect bots, and protect against cross-site request forgery (CSRF) attacks. These are integral to Platform security and cannot be disabled.

uuubd does not use advertising or behavioural targeting cookies that track your activity across third-party websites. You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For a full list of the cookies currently in use on uuubd, contact us at [email protected].

5. Data Retention and Deletion

uuubd retains your personal data for as long as your account is active and for as long as is necessary to fulfil the purposes set out in this Policy. Specific retention periods by data category are as follows:

Data Category	Retention Period	Reason
Registration data	Life of account + 5 years after closure	AML obligations, dispute resolution
KYC documents	5 years after account closure	Regulatory and legal compliance
Financial transaction records	7 years after account closure	Financial regulatory requirements
Gaming activity records	5 years after account closure	Dispute resolution, responsible gaming audit
Support communications	3 years after last interaction	Quality assurance, dispute resolution
Technical and usage logs	12 months on a rolling basis	Security monitoring and analytics
Marketing consent records	Life of consent + 3 years	Proof of lawful processing

When data is no longer required for its stated purpose and the applicable retention period has expired, uuubd will securely delete or anonymise it. Secure deletion involves overwriting data on storage media using industry-standard methods that prevent reconstruction. Where anonymisation is used in preference to deletion, the resulting data cannot be traced back to any individual.

If you request deletion of your account and personal data before the applicable retention period has expired, uuubd will honour your request to the maximum extent permitted by law. We will inform you of any categories of data that we are legally required to retain, and the basis for doing so, at the time of your deletion request.

6. Your Data Rights

As a user of the uuubd Platform, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected]. We will respond within 14 calendar days of receiving your request.

• Right of Access: You may request a copy of all personal data uuubd holds about you, along with information about how it is being processed and the legal basis for processing.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor details such as address updates can be made directly in your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data. This right applies where data is no longer necessary for the purpose for which it was collected, where you withdraw consent (and there is no other legal basis for processing), or where processing is unlawful. This right is subject to legal and regulatory retention obligations.
• Right to Restrict Processing: In certain circumstances, you may ask uuubd to restrict processing of your data — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON), which you can then transfer to another service provider.
• Right to Object: Where processing is based on legitimate interest, you have the right to object. uuubd will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for legal claims.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

7. Data Security Measures

uuubd takes the security of your personal data extremely seriously. We implement a layered approach to data security, combining technical, administrative, and physical safeguards to protect your information against unauthorised access, disclosure, alteration, or destruction.

7.1 Technical Safeguards

• 256-bit SSL/TLS encryption: All data transmitted between your device and the uuubd Platform is encrypted using the same standard employed by leading Bangladeshi financial institutions, including Dutch-Bangla Bank and BRAC Bank.
• Encryption at rest: Sensitive data fields — including identity documents, payment references, and password hashes — are encrypted using AES-256 when stored in our databases.
• Password hashing: User passwords are never stored in plain text. They are hashed using a strong one-way hashing algorithm with individual salts, making brute-force recovery computationally infeasible.
• Two-factor authentication (2FA): uuubd supports 2FA on all player accounts. We strongly encourage all users to enable 2FA in their account settings for an additional layer of login security.
• Intrusion detection and monitoring: Our infrastructure is monitored 24/7 for anomalous behaviour. Automated alerts are configured to flag and respond to potential security incidents in real time.
• Regular penetration testing: Independent security professionals conduct regular penetration tests of the uuubd Platform to identify and remediate vulnerabilities before they can be exploited.

7.2 Administrative Safeguards

Access to personal data within uuubd is governed by a strict role-based access control (RBAC) policy. Only personnel whose job function requires access to a particular category of data are granted permission to view it. All staff with access to personal data undergo data protection training and are bound by confidentiality obligations. Access logs are audited regularly.

7.3 Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, uuubd will notify affected users without undue delay — and in any case within 72 hours of becoming aware of the breach — providing details of the nature of the breach, the categories and approximate number of data records affected, the likely consequences, and the measures being taken to address it. We will also report qualifying breaches to the appropriate supervisory authority as required by applicable law.

8. Policy Updates and Contact

uuubd reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform features. When material changes are made, we will notify registered users by email and/or by displaying a prominent notice on the Platform for a period of not less than 30 days before the changes take effect. The "Last updated" date at the top of this Policy will always reflect the date of the most recent revision.

Your continued use of the uuubd Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should cease using the Platform and may request deletion of your account and personal data in accordance with Section 6 of this Policy.

Previous versions of this Privacy Policy are available upon request by contacting us at [email protected]. The current version of this Policy supersedes all prior versions.