Privacy Policy for uu99

1 Introduction

This Privacy Policy ("Policy") describes how uu99 ("the Platform", "we", "us", "our") collects, uses, stores, discloses, and otherwise processes personal data relating to individuals ("User", "you", "your") who access or use the uu99 website and associated services. uu99 is an online entertainment platform offering sports betting, live casino, slot games, and related services primarily to players based in Bangladesh.

This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy. Where any conflict arises between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail unless expressly stated otherwise.

uu99 is committed to processing personal data responsibly, transparently, and securely. We have designed our data practices to be proportionate to the services we provide, and we continuously review our procedures to ensure that your information is handled with care.

2 Data We Collect

uu99 collects a range of personal data categories depending on how you interact with the platform. The principal categories are set out below:

We do not intentionally collect special categories of sensitive personal data (such as health data, racial or ethnic origin, political opinions, or biometric data) unless specifically required by applicable law or regulatory obligation.

3 How We Collect Your Data

uu99 collects personal data through the following channels:

• Direct interactions: When you register an account, complete identity verification, make a deposit or withdrawal, contact support, or submit a form on the uu99 platform, you provide data directly to us.
• Automated technologies: As you interact with our platform, we automatically collect technical and usage data via cookies, server logs, pixel tags, and similar tracking technologies.
• Payment providers: When you transact via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, or Mastercard, relevant transaction data is shared between uu99 and your payment provider.
• Identity verification providers: Where required by our KYC process, we work with third-party verification services who may provide us with identity confirmation or document authentication results.
• Fraud prevention services: We may receive or cross-reference data from fraud detection and anti-money laundering service providers to protect the integrity of the platform.
• Publicly available sources: We may supplement account data with information from publicly available sources (e.g., public records, sanctions screening databases) where legally permitted and operationally necessary.

4 How We Use Your Data

uu99 uses your personal data for the following purposes:

• Account management: To create, maintain, and manage your uu99 account, including processing login requests and enforcing account security.
• Service delivery: To provide you with access to sports betting markets (including cricket BPL and T20), live casino games, slots, and all other uu99 features.
• Identity and age verification: To verify that you are at least 21 years of age and that the identity information you provide is accurate, as required by our operating standards.
• Financial processing: To process deposits and withdrawals in Bangladeshi Taka (৳) via your chosen payment method, and to maintain accurate transaction records.
• Responsible gaming: To monitor for signs of problem gambling, enforce deposit limits and self-exclusion requests, and fulfil our duty of care obligations.
• Fraud and security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
• Customer support: To respond to your enquiries, process complaints, and resolve disputes in a timely manner through our 24/7 English-language support service.
• Legal compliance: To comply with applicable laws, regulations, court orders, and lawful requests from competent authorities.
• Marketing and promotions: Where you have given explicit consent, to send you personalised offers, bonus notifications, and news about uu99 promotions including seasonal campaigns for Eid, Pohela Boishakh, and BPL tournaments.
• Platform improvement: To analyse usage patterns, test new features, and improve the overall user experience on the uu99 platform.

5 Legal Basis for Processing

uu99 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing is necessary to fulfil the contract between you and uu99, including providing access to the platform and processing your bets and transactions.
• Consent: Where we rely on your consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Legal obligation: Processing is necessary to comply with applicable legal requirements, including age verification, identity checks, anti-money laundering obligations, and regulatory reporting.
• Legitimate interests: Processing is necessary for the legitimate interests of uu99 (such as fraud prevention, platform security, and service improvement), provided those interests are not overridden by your fundamental rights and freedoms.

6 Data Sharing & Disclosure

uu99 does not sell your personal data. We may share your data with third parties only in the following circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners receive the financial data necessary to execute your deposit and withdrawal transactions.
• Identity verification providers: Third-party KYC and document authentication services receive identity documents you submit to facilitate account verification.
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data necessary to deliver their games via the uu99 platform.
• Fraud prevention and AML services: Specialist compliance vendors may receive relevant transactional and identity data to perform sanctions screening and fraud detection.
• Technology infrastructure providers: Cloud hosting, content delivery, and data storage providers that underpin the uu99 platform may process personal data as data processors acting on our instructions.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, courts, or regulators where required by applicable law, court order, or regulatory direction — without prior notice to you where disclosure is legally required.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of assets involving uu99, personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections remaining in place.

All third-party processors engaged by uu99 are required to maintain appropriate technical and organisational security measures and to process personal data only in accordance with our documented instructions.

7 Cookies & Tracking Technologies

uu99 uses cookies and similar technologies (such as local storage, session tokens, and pixel tags) to operate and improve the platform. Cookies are small text files placed on your device when you visit the uu99 website.

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. These cannot be disabled without breaking the platform.
• Functional cookies: Remember your preferences such as language setting, currency display (৳), and recent game history to provide a more personalised experience.
• Analytics cookies: Help us understand how users interact with the platform by collecting aggregated, anonymised usage data such as most visited pages, session durations, and error occurrences.
• Marketing cookies: Where you have consented, these cookies are used to deliver relevant promotional content about uu99 bonuses and events. You may opt out of marketing cookies at any time by contacting [email protected].

8 Data Retention

uu99 retains personal data for no longer than is necessary for the purposes set out in this Policy. The principal retention periods applied by uu99 are:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, to comply with anti-money laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction in accordance with applicable financial compliance requirements.
• Support correspondence: Retained for three (3) years from the date of the last interaction unless required longer for an ongoing dispute or regulatory matter.
• Marketing consent records: Retained for as long as necessary to demonstrate compliance with consent obligations, or until you withdraw consent, whichever is sooner.
• Technical and usage logs: Typically retained for up to twelve (12) months in rolling fashion unless flagged for security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identified or identifiable individual.

9 Data Security

uu99 implements a range of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures include:

• SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage of sensitive personal and financial data at rest.
• Role-based access controls limiting internal access to personal data to authorised personnel with a legitimate operational need.
• Regular security assessments, penetration testing, and vulnerability scanning of platform infrastructure.
• Multi-factor authentication requirements for internal administrative access to data systems.
• Automated anomaly detection and alerting to identify unusual access patterns indicative of a breach attempt.

While uu99 takes data security seriously and applies industry-standard safeguards, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, uu99 will notify affected users and relevant authorities as required by applicable law. You are responsible for keeping your account password confidential and for notifying us promptly if you suspect unauthorised access to your uu99 account.

10 Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by uu99. To exercise any of these rights, please contact us at [email protected]:

• Right of access: You may request a copy of the personal data that uu99 holds about you, along with information about how it is being processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to erasure: In certain circumstances, you may request that we delete your personal data. This right is subject to exceptions, including where we are required to retain data to comply with legal obligations or to establish, exercise, or defend legal claims.
• Right to restriction: You may request that we restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing and a determination is pending.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing of your personal data where that processing is based on legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

uu99 will respond to all verified data rights requests within thirty (30) days. In complex or high-volume cases, this period may be extended by an additional sixty (60) days, and we will notify you of any such extension. We may require identity verification before processing a data rights request to ensure we do not disclose data to an unauthorised person.

11 Minors

uu99 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. Registration on the uu99 platform is prohibited for anyone under 21 years of age, and we employ age verification procedures to enforce this requirement.

If we become aware that personal data belonging to a person under the age of 21 has been collected, we will immediately close the associated account, delete all related personal data, and void any associated transactions. If you believe that a person under 21 has registered on the uu99 platform, please notify us immediately at [email protected] so that we can investigate and take appropriate action.

12 International Data Transfers

In order to deliver the uu99 platform and its associated services, your personal data may be transferred to and processed in countries outside Bangladesh. This may occur, for example, when data is processed by cloud infrastructure providers, game software suppliers such as Pragmatic Play, Evolution Gaming, or NetEnt, or specialist compliance and fraud-prevention service providers who operate from various international locations.

Where personal data is transferred outside Bangladesh, uu99 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard consistent with the principles described in this Policy. Such safeguards may include contractual obligations imposed on recipient entities requiring them to maintain equivalent data protection standards.

13 Changes to This Policy

uu99 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will endeavour to provide advance notice by displaying a prominent notice on the uu99 platform or by sending a notification to your registered email address.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how uu99 protects your personal data. Your continued use of the platform following publication of a revised Policy constitutes your acceptance of those changes.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which uu99 processes your personal data, please contact our support team. We are available around the clock and will be happy to assist you.

For data rights requests specifically (access, erasure, portability, etc.), please include "Data Rights Request" in the subject line of your email and provide sufficient information to allow us to verify your identity before processing your request.