kua9 Privacy Policy

Introduction and Scope

This Privacy Policy ("Policy") describes how kua9 ("kua9", "we", "us", "our") collects, uses, stores, discloses, and protects personal information about players and visitors ("you", "your") who access or use the kua9 online gaming platform located at kua9.app and all associated pages, services, and features. This Policy applies to all personal data processed by kua9 in connection with your use of the platform, whether you access kua9 via a mobile browser on an Android or iOS device, via a tablet, or via a desktop computer.

kua9 is an online gaming platform designed specifically for the Bangladesh market, operating in Bangladeshi Taka (BDT) and supporting payment via bKash, Nagad, Rocket, Upay, and other Bangladesh-market payment methods. Because our platform processes financial transactions and collects identity information for KYC (Know Your Customer) compliance, we take data privacy exceptionally seriously. This Policy sets out our obligations to you and your rights as a data subject.

Information We Collect

kua9 collects personal information in several ways: directly from you when you register or update your account, automatically when you use the platform, and from third-party payment providers when you make a deposit or withdrawal. The categories of data we collect are set out in the table below:

How We Use Your Information

kua9 uses personal data only for purposes that are directly related to operating the platform, fulfilling our obligations to you, and complying with applicable legal and regulatory requirements. Specifically, we use your data for the following purposes:

• Account creation and management: to register your account, authenticate your identity at login, and maintain your account in good standing throughout your use of kua9.
• Payment processing: to process deposits via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to process withdrawal requests to the same or a verified payment account.
• KYC and fraud prevention: to verify your identity and age as required by our responsible gaming policy, to detect and prevent fraud, money laundering, and other prohibited conduct, and to comply with any applicable legal obligations.
• Platform improvement: to understand how players use kua9 and to improve the gaming experience, payment flow, and platform performance for Bangladesh users on mobile devices.
• Communications: to send you important account-related notifications, security alerts, and, where you have opted in, promotional communications about bonuses and offers available on kua9.
• Responsible gaming: to monitor account activity for signs of problem gambling and to apply deposit limits, session reminders, cooling-off periods, and self-exclusion settings requested by you or required by our responsible gaming policy.

kua9 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review. Where automated screening is used as part of fraud or KYC checks, any adverse decision is reviewed by a kua9 team member before action is taken on your account.

Legal Basis for Processing

kua9 processes personal data only when a valid legal basis exists for doing so. The legal bases we rely on are:

• Contractual necessity: processing necessary to perform our contract with you, including operating your account, processing payments, and providing access to games.
• Legal obligation: processing necessary to comply with our legal obligations, including KYC identity verification, anti-money laundering checks, and age verification requirements.
• Legitimate interests: processing necessary for our legitimate interests in operating a safe and functional gaming platform, preventing fraud, improving our services, and ensuring platform security — provided those interests are not overridden by your rights and interests.
• Consent: where you have given clear, specific consent to a particular use of your data, such as receiving promotional emails or push notifications about kua9 bonuses and offers. You may withdraw consent at any time by contacting us.

Payment Data and KYC Processing

Because kua9 operates in BDT and processes real-money transactions, financial data handling receives special attention. When you make a deposit via bKash, Nagad, or Rocket, kua9 receives a transaction reference and confirmation from the payment provider. kua9 does not store full bKash or Nagad PIN numbers, full bank account numbers, or card numbers. Only the account reference (typically your registered mobile number) and the transaction confirmation data are retained.

KYC documents (national ID card images, passport scans) collected during identity verification are stored in an encrypted format on secure servers. Access to KYC documents is strictly limited to authorised kua9 personnel and, where legally required, to relevant regulatory or law enforcement authorities in Bangladesh. KYC documents are not shared with any commercial third party.

Sharing Your Information

kua9 does not sell, rent, or trade personal data. We share personal data with third parties only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, and other payment service providers receive only the minimum data necessary to process your transaction (transaction amount, your registered mobile number or account reference).
• Game and technology providers: Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt and other game providers receive technical session data (player ID, bet data, game outcome) to operate games. They do not receive your name, national ID, or payment details.
• Legal and regulatory authorities: kua9 may disclose personal data to Bangladesh law enforcement, courts, or regulatory bodies where required to do so by law, court order, or to protect the rights, property, or safety of kua9, its players, or the public.
• Fraud prevention and security services: third-party fraud screening and device fingerprinting services used by kua9 receive technical data (IP address, device data) under strict data processing agreements. They do not receive your name or payment account details.

Where data is shared with third-party service providers, kua9 ensures that appropriate data processing agreements are in place and that providers are required to handle personal data in accordance with applicable data protection principles. kua9 remains responsible for ensuring that any data sharing is lawful and proportionate.

Cookies and Tracking Technologies

kua9 uses cookies and similar tracking technologies to operate the platform, maintain your login session, remember your preferences, and understand how players use the site. The categories of cookies used are:

• Essential session cookies: required for the platform to function. These cookies maintain your login state, session security tokens, and cart/balance state. They cannot be disabled without breaking core platform functionality.
• Analytics cookies: used to collect anonymised data about how the kua9 platform is used, including pages visited, games played, session duration, and device type. This data helps us improve the platform experience for Bangladesh users on 4G mobile.
• Preference cookies: used to remember your language preference and responsible gaming settings between sessions.

You may manage cookie preferences through your mobile browser settings. Please note that disabling essential cookies will prevent you from logging in to your kua9 account. kua9 does not use advertising cookies or cross-site tracking cookies that follow you outside of kua9.app.

Data Retention

kua9 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The general retention periods that apply to the main categories of data held by kua9 are as follows: account and identity data is retained for the duration of your account and for a period of five years following account closure; transaction and financial data is retained for seven years from the date of the transaction to meet financial record-keeping requirements; KYC documents are retained for five years from the date of verification or account closure, whichever is later; usage and analytics data is retained in anonymised or aggregated form for up to three years.

When personal data is no longer required and no legal obligation exists to retain it, kua9 will securely delete or anonymise that data. Players may request early deletion of certain categories of personal data (subject to legal retention obligations) by submitting a written request to the contact email published on this platform.

Your Data Rights

As a kua9 player based in Bangladesh, you have the following rights with respect to your personal data. To exercise any of these rights, please contact kua9 using the support email address published on this platform. kua9 will respond to all data rights requests within 14 calendar days:

• Right of access: you may request a copy of all personal data kua9 holds about you, together with information about how it is used and with whom it is shared.
• Right to rectification: if any personal data held by kua9 about you is inaccurate or incomplete, you have the right to request that it be corrected or completed.
• Right to erasure: you may request deletion of personal data that is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations. For example, you may request deletion of marketing preference data at any time.
• Right to restrict processing: in certain circumstances, you may request that kua9 restrict the processing of your personal data, for example while a correction request is being resolved.
• Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

kua9 will not discriminate against you or restrict your access to the platform solely because you have exercised a data rights request. If a request cannot be fulfilled in full due to a conflicting legal obligation, kua9 will explain the reason in writing.

Data Security

kua9 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Security measures in place include SSL/TLS encryption for all data transmitted between your device and kua9 servers; encryption at rest for sensitive data including KYC documents and financial records; access controls limiting internal access to personal data to authorised personnel on a need-to-know basis; regular security reviews of platform infrastructure; and session timeout controls to reduce the risk of unauthorised access from shared or unattended devices.

Despite these measures, no internet transmission or electronic storage system is 100% secure. If you become aware of any security incident or suspect that your kua9 account has been accessed without authorisation, please notify kua9 support immediately using the contact email published on this platform. kua9 will investigate all reported security incidents promptly.

Children and Minors

kua9 is strictly an adult platform for players aged 21 and above only. kua9 does not knowingly collect personal data from persons under the age of 21. Registration requires confirmation of age eligibility, and kua9 may conduct age verification checks using KYC documentation at any time. If kua9 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account closed. If you believe a minor has registered on kua9, please contact us immediately using the support email address on this platform.

Changes to This Privacy Policy

kua9 reserves the right to update this Privacy Policy at any time. When material changes are made, the revised Policy will be published on kua9.app with an updated effective date. Where reasonably practicable, kua9 will notify registered players of significant changes via the mobile number or email address registered on their account.

Your continued use of kua9 after the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must stop using the platform and may request account closure by contacting kua9 support.

Contact and Privacy Enquiries

All privacy-related enquiries, data rights requests, and complaints should be submitted in writing to the support email address published on this platform. kua9 does not accept telephone enquiries regarding privacy matters. Please include your registered mobile number and a clear description of your enquiry or request so that our team can respond promptly and accurately.

Response times for privacy enquiries are typically within 5 Bangladesh Standard Time business days. For urgent security-related matters such as suspected unauthorised account access, kua9 aims to respond within 24 hours. kua9 takes all privacy complaints seriously and will investigate each matter thoroughly before providing a written response.