Privacy Policy – How kue9 Collects, Uses, and Protects Your Data

Introduction and Scope

This Privacy Policy ("Policy") applies to all personal data processed by kue9 ("we", "us", "our") in connection with the operation of the kue9 online casino and sports betting platform, accessible at kue9.net and any associated mobile interfaces or subdomains operated by kue9. It applies to all registered users ("you", "your", "Player") who access the platform from Bangladesh or any other jurisdiction where kue9 services are available.

kue9 acts as the data controller in respect of all personal data collected directly from players through the platform. Where kue9 engages third-party service providers who process data on our behalf — for example, payment processors, KYC verification vendors, and game providers — those parties act as data processors under kue9's instructions and are bound by data processing agreements that reflect the obligations set out in this Policy.

This Policy covers data collected through the kue9 website, any kue9 mobile application, customer support interactions (including email, live chat, and WhatsApp), and any promotional or marketing communications sent by kue9. It does not extend to third-party websites or services that may be linked from the kue9 platform, as those services operate under their own privacy policies for which kue9 bears no responsibility.

kue9 may update this Privacy Policy from time to time. The current version will always be available at kue9.net/privacy-policy with the "Last Reviewed" date clearly indicated. We will notify registered players of material changes via their registered email address. Continued use of the platform following notification of a change constitutes acceptance of the revised Policy.

Data We Collect

kue9 collects only the personal data that is necessary for the purposes described in this Policy. We do not collect data beyond what is required to operate our platform safely, legally, and effectively. The categories of personal data we collect include:

kue9 does not intentionally collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data for identification purposes) unless explicitly required by law enforcement or a regulatory authority. If you voluntarily disclose such information during a support interaction, we will handle it with an additional layer of care and will not process it for any purpose beyond the immediate support context.

How We Collect Your Data

kue9 collects personal data through a number of distinct channels, all of which are designed to be transparent and proportionate to the purpose for which the data is required:

• Direct registration: When you create a kue9 account, you provide identity and contact data directly via the registration form. This is the primary source of your core personal profile on our platform.
• KYC verification submissions: When you submit identity documents (NID, passport, proof of address) through the account verification workflow, kue9 and our KYC processing partner collect and verify those documents against your registered profile.
• Payment transactions: When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, or card, the relevant financial data is collected by kue9 and the payment processing partner handling that transaction.
• Platform usage and cookies: Technical and usage data is collected automatically via server logs and cookies when you access and navigate the kue9 platform. See Section 6 (Cookies) for full details.
• Customer support interactions: When you contact kue9 via live chat, email at [email protected], or WhatsApp at +880 1700-000000, the content of those communications and any information you provide within them is recorded for quality assurance and compliance purposes.
• Third-party verification services: Where kue9 uses external identity verification or fraud detection services, those services may supply kue9 with verification outcomes and risk scores derived from matching your submitted data against their databases.

Purpose and Legal Basis for Processing

kue9 processes personal data only where we have a valid legal basis for doing so. The following table sets out the primary purposes for which we process your data and the corresponding legal basis for each:

Where kue9 relies on consent as the legal basis for processing — primarily for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw marketing consent, log in to your account and update your notification preferences, or contact [email protected] with a written request.

Data Sharing and Third Parties

kue9 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for each specific purpose:

• Payment processors: bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, and card processing partners (Visa, Mastercard) receive the financial data required to process your deposit or withdrawal transaction. These partners operate under their own privacy policies and are subject to applicable Bangladesh financial regulations.
• KYC and identity verification providers: Third-party identity verification vendors receive your identity documents and personal details solely for the purpose of verifying your identity and confirming your age (18+) for compliance purposes. These vendors are bound by data processing agreements with kue9.
• Game technology providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe, and other game providers receive the minimum technical data required to serve game content to your session — typically a session token and account-level game history. They do not receive your full personal profile.
• Fraud and security vendors: kue9 uses third-party fraud detection and cybersecurity services that may receive IP addresses, device fingerprints, and behavioural data for the purpose of identifying and preventing fraud, account takeovers, and platform abuse.
• Analytics providers: Aggregated, anonymised usage data may be processed by analytics platforms to help kue9 understand how the platform is used and to identify opportunities to improve the user experience. No personally identifiable information is shared with analytics providers.
• Legal and regulatory authorities: kue9 will disclose personal data to law enforcement, courts, or regulatory authorities where required to do so by a valid legal obligation, court order, or regulatory direction. kue9 will, where permitted by law, notify the affected player before making such disclosure.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of kue9's business, player data may be transferred to the successor entity as part of the transaction. Players will be notified of any such transfer and any changes to data processing arrangements that result from it.

Cookies and Tracking Technologies

kue9 uses cookies and similar tracking technologies — including local storage objects and session tokens — to operate the platform, maintain your login session, and improve your experience. Cookies are small text files stored on your device by your browser when you access the kue9 platform.

You can manage cookie preferences at the browser level. Most modern browsers allow you to view, block, or delete cookies via their privacy or security settings. Please note that disabling strictly necessary cookies will impair your ability to use the kue9 platform, including preventing login and gameplay. Disabling analytics and marketing cookies will not affect your ability to play games or make transactions.

Data Retention

kue9 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, unless a longer retention period is required or permitted by law. The following retention periods apply as a general guide:

• Account and identity data: Retained for the lifetime of your account plus a minimum of 5 years following account closure, to comply with anti-money laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of 7 years following each transaction, consistent with applicable financial record-keeping requirements.
• KYC documents: Retained for the lifetime of your account plus 5 years, or for such longer period as may be required by applicable law or a regulatory authority.
• Customer support records: Retained for 3 years from the date of the final interaction in a support thread, unless the interaction relates to an unresolved dispute or legal claim, in which case records are retained until the matter is fully resolved.
• Technical and usage logs: Retained for 13 months on a rolling basis, after which older log data is deleted or anonymised.
• Marketing preference records: Retained for the lifetime of your account plus 2 years, as evidence of consent or opt-out status.

When personal data is no longer required and no legal obligation to retain it exists, kue9 deletes it securely or anonymises it in a manner that prevents re-identification. Backups containing personal data are subject to the same retention schedule as live data and are purged on a rolling basis consistent with our backup management policy.

Data Security Measures

kue9 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes, but is not limited to, the following controls:

• TLS/SSL encryption: All data transmitted between your device and kue9 servers is encrypted in transit using Transport Layer Security (TLS 1.2 or higher). You can verify this by the padlock icon in your browser's address bar when visiting kue9.net.
• Encryption at rest: Sensitive personal data fields — including identity document data, financial identifiers, and hashed passwords — are encrypted at rest in kue9's database infrastructure.
• Password hashing: User passwords are never stored in plain text. kue9 stores only a salted cryptographic hash of your password, meaning even kue9 system administrators cannot retrieve your actual password.
• Two-factor authentication (2FA): kue9 offers SMS-based 2FA for all registered accounts. kue9 strongly encourages all players in Bangladesh to enable 2FA to protect their account against unauthorised access.
• Access controls: kue9 staff access to personal data is governed by a role-based access control (RBAC) system. Only staff members with a documented operational need to access a specific category of personal data are granted access to that data.
• Penetration testing and security audits: kue9 conducts regular security assessments, including third-party penetration testing, to identify and remediate vulnerabilities in our platform infrastructure before they can be exploited.
• Incident response: kue9 maintains a documented data breach response plan. In the event of a data breach that poses a risk to your rights and freedoms, kue9 will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

Your Privacy Rights

As a kue9 player, you hold a range of rights in relation to the personal data we hold about you. kue9 is committed to honouring these rights promptly and without unnecessary barriers. The following rights are available to all registered account holders:

• Right of Access

  You have the right to request a copy of the personal data kue9 holds about you. We will provide this in a structured, commonly used, machine-readable format (such as a PDF or CSV export) within 30 days of a verified request. This is sometimes referred to as a Subject Access Request (SAR).

• Right to Rectification

  If any personal data kue9 holds about you is inaccurate or incomplete, you have the right to request that we correct it. You may update most contact details directly within your account settings. For identity data corrections, please contact [email protected] with supporting documentation.

• Right to Erasure

  You have the right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (for consent-based processing), or where you object to processing and there is no overriding legitimate ground. Please note that kue9 may be required to retain certain data for legal compliance (AML record-keeping, etc.) even following an erasure request.

• Right to Restriction of Processing

  You may request that kue9 restricts the processing of your personal data — for example, while a rectification request is being assessed, or while an objection to processing is under review. During a restriction period, kue9 will continue to store your data but will not actively process it beyond what is required for storage and compliance.

• Right to Data Portability

  Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another service provider where technically feasible.

• Right to Object

  You have the right to object to kue9 processing your personal data on the basis of legitimate interests — including profiling for marketing purposes. Where you object to marketing processing, kue9 will stop using your data for that purpose immediately. Objections to other forms of processing will be assessed against the specific legitimate interest relied upon.

• Right to Withdraw Consent

  Where kue9 processes your data based on your consent — such as for marketing communications and promotional campaign notifications — you may withdraw that consent at any time by updating your preferences in your account dashboard or by emailing [email protected]. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request" and include your registered account username and email address. kue9 will verify your identity before processing any rights request to protect against unauthorised access to another player's data. We will respond to all valid requests within 30 days. In complex cases, this period may be extended by a further 30 days, of which we will notify you in advance.

Contact and Privacy Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how kue9 has handled your personal data, please contact our privacy team using the following channels:

• Email: [email protected] (use subject line "Privacy Rights Request" or "Privacy Complaint" as appropriate)
• Live Chat: Available 24/7 to all registered kue9 account holders via the platform
• WhatsApp: +880 1700-000000, available 09:00–23:00 Bangladesh Standard Time (BST, UTC+6)

kue9 targets acknowledgement of all privacy-related enquiries within 24 hours and full resolution within 30 days. For complaints that cannot be resolved through direct contact with kue9, you may have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. kue9 will cooperate fully with any such authority in the handling of a complaint.

This Privacy Policy was last reviewed in January 2026. kue9 reserves the right to update this Policy at any time to reflect changes in our data processing practices, platform features, or applicable legal requirements. The most current version will always be available at kue9.net/privacy-policy.

18+ Only — Please Play Responsibly