uuubd Privacy Policy – Your Data, Your Rights

When you register an account on uuubd, we collect the following personal information:

• Full legal name (as it appears on your government-issued identification document).
• Mobile phone number (used as your primary account identifier and for OTP authentication).
• Date of birth (used to verify that you meet the minimum age requirement of 21 years).
• Government-issued photo identification and proof of address (collected during KYC verification, required before your first withdrawal is processed).

When you make deposits or withdrawals on uuubd, we collect transaction-related information, including:

• The mobile wallet number or bank account identifier associated with your deposit or withdrawal (e.g. your bKash or Nagad number). Full financial account numbers are not stored by uuubd after a transaction is completed.
• Transaction amount, currency, date, time, and reference numbers for all deposits, withdrawals, wagers, wins, and bonus credits.
• Account balance history maintained for regulatory compliance and dispute resolution purposes.

When you use the Platform, we automatically collect certain technical information about your device and session, including:

• IP address and approximate geographic location derived from it (city or region level; uuubd does not use GPS-level location tracking).
• Device type, operating system, browser type and version, and screen resolution. This information is used to optimise the Platform's performance on your specific device.
• Pages visited, features accessed, games played, betting patterns, session duration, and interaction events (button clicks, menu opens). This behavioural data is used for platform improvement, responsible gaming monitoring, and fraud detection.

uuubd uses your personal data only for the following stated purposes:

• Account management: creating and maintaining your account, authenticating your identity at login, processing password resets, and providing account-level customer support in English and Bengali.
• Payment processing: facilitating deposits from and withdrawals to your registered bKash, Nagad, Rocket, Upay, or bank account; verifying payment source ownership; and maintaining transaction records for compliance and dispute resolution.
• KYC and age verification: confirming that you are aged 21 or above and that the payment methods you use are registered in your own name, as required by our responsible gaming obligations and applicable anti-money laundering frameworks.
• Responsible gaming monitoring: analysing your betting behaviour, deposit frequency, session duration, and account activity patterns to identify signs of potential problem gambling and to apply responsible gaming tools (deposit limits, session limits, self-exclusion) where appropriate.
• Platform improvement and analytics: using aggregated, anonymised data to understand how the Platform is used, identify technical issues, optimise page load performance for Bangladeshi mobile networks, and improve the overall user experience.

uuubd processes your personal data on the following legal grounds:

• Contractual necessity: the majority of data processing is necessary to perform the contract between you and uuubd (i.e. to provide you with access to the Platform, process your transactions, and manage your account).
• Legal obligation: certain processing activities (KYC identity verification, AML transaction monitoring, retention of financial records) are required by applicable anti-money laundering regulations and responsible gaming frameworks.
• Legitimate interests: technical data collected for fraud detection, security monitoring, and platform performance optimisation is processed on the basis of uuubd's legitimate interests in operating a secure and reliable service, provided those interests are not overridden by your privacy rights.
• Consent: where uuubd sends you promotional communications about bonuses or new game launches, this is done on the basis of your consent, which you may withdraw at any time by contacting [email protected].

uuubd does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. We may share your personal data only in the following circumstances:

• Payment service providers: we share transaction-level data with your chosen mobile money operator (bKash, Nagad, Rocket, or Upay) or bank as strictly necessary to process your deposit or withdrawal. These providers receive only the data required to execute the transaction.
• Game technology providers: game studios and platform technology partners (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) may receive anonymised session data to operate their games on the Platform. They do not receive your personal identification information.
• Regulatory and law enforcement authorities: where uuubd is required by law, court order, or regulatory directive to disclose personal data to a government authority or law enforcement body, we will comply. Where legally permitted to do so, we will notify you of such a request.
• Fraud prevention and AML partners: aggregated, pseudonymised risk-scoring data may be shared with specialist fraud prevention or anti-money laundering service providers under strict data processing agreements that prohibit them from using the data for any purpose other than the contracted service.

In all cases, uuubd applies the principle of data minimisation: only the minimum personal data necessary for the specific purpose is shared with a third party. All third-party data processors engaged by uuubd are bound by contractual obligations that require them to protect your data to a standard at least equivalent to that applied by uuubd itself.

uuubd processes all deposit and withdrawal transactions through established Bangladeshi mobile financial services (bKash, Nagad, Rocket, Upay) and select partner banks. When you initiate a deposit or withdrawal, your payment identifier (for example, your registered bKash mobile number) is transmitted to the relevant payment provider using 256-bit SSL encryption. uuubd does not store full mobile wallet PINs, bank card numbers, or full banking credentials at any point. Only the information necessary to identify your payment method for future transactions and to comply with AML obligations is retained.

All financial transaction records are retained for a minimum of five years following the date of the transaction, as required by applicable anti-money laundering regulations. These records may be accessed by uuubd's compliance team and, where legally required, by relevant regulatory or law enforcement authorities.

uuubd uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage. We use three categories of cookies:

• Essential cookies: these are strictly necessary for the Platform to function. They maintain your login session, remember your language preference, and protect against cross-site request forgery. These cookies cannot be disabled without breaking the Platform's core functionality.
• Analytics cookies: these collect anonymised data about how visitors use the Platform (pages visited, session duration, device type). This data is used exclusively to improve the Platform's performance and usability. No personally identifiable information is contained in analytics cookies.
• Preference cookies: these remember optional settings you have selected, such as your preferred language (English or Bengali) and display preferences. You can delete these cookies at any time through your browser settings without affecting your ability to use the Platform.

uuubd does not use advertising or tracking cookies from third-party ad networks. The Platform contains no third-party advertising pixels or retargeting scripts.

uuubd retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply: active account data is retained for the duration of your account plus five years after account closure; KYC identity documents are retained for five years from the date of submission or from the date of account closure, whichever is later; financial transaction records are retained for a minimum of five years from the transaction date; technical log data (IP addresses, session logs) is retained for a maximum of 12 months; and marketing preference records are retained until you withdraw your consent.

When your personal data is no longer required and there is no legal obligation to retain it, uuubd will securely delete or anonymise it so that it can no longer be associated with you as an individual.

As a user of the uuubd Platform you have the following rights in relation to your personal data:

• Right of access: you may request a copy of all personal data that uuubd holds about you. We will respond to access requests within 30 days of receipt.
• Right of rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to erasure: you may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where processing is unlawful. This right is subject to legal retention obligations that may override it.
• Right to restrict processing: in certain circumstances you may request that uuubd limits how it processes your personal data (for example, while we are verifying the accuracy of data you have disputed).
• Right to object: you have the right to object to processing of your personal data that is carried out on the basis of legitimate interests, including profiling. You also have an absolute right to object to direct marketing at any time.

To exercise any of these rights, please contact uuubd at [email protected] with the subject line "Data Rights Request". Please include your registered mobile number and a brief description of your request. uuubd will respond within 30 calendar days. Where a request is complex or where we receive a high volume of requests, we may extend this period by a further 30 days, in which case we will notify you.

uuubd implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include 256-bit SSL encryption for all data transmitted between your device and our servers; encrypted storage of account credentials and sensitive personal data; two-factor authentication (OTP) for account login and withdrawal requests; regular security audits and penetration testing; and strict internal access controls that limit staff access to personal data to those whose role requires it.

While uuubd takes all reasonable steps to protect your personal data, no internet-based service can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, uuubd will notify affected users as promptly as possible and will take all appropriate remedial steps.

uuubd reserves the right to update this Privacy Policy at any time. Where changes are material, we will provide reasonable advance notice to registered account holders via an in-platform notification or email before the updated policy takes effect. Minor updates (such as corrections of typographical errors, rewording for clarity that does not change the substance of the policy, or updates required to reflect changes in applicable law) may be made without prior notice. The "Effective Date" at the top of this page will always reflect the date on which the current version of the policy took effect. We encourage you to review this page periodically to stay informed about how uuubd protects your personal data.