Your Privacy Matters at uk99 — Here Is How We Protect It

1 Introduction

Welcome to the uk99 Privacy Policy. uk99 is a cross-border online betting and casino platform serving players in Bangladesh and South Asia. We accept deposits and process transactions in Bangladeshi Taka (BDT) and Indian Rupees (INR), and we support a range of local payment methods including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and City Bank. The privacy and security of every player on the uk99 platform is a matter we take with the utmost seriousness.

This Privacy Policy ("Policy") describes how uk99 ("we", "us", "our", "the Platform") collects, uses, stores, protects, and under certain defined circumstances shares the personal information you provide or that is automatically generated when you access and use the uk99 platform. It also describes the rights you have in relation to your personal data and how you may exercise those rights.

This Policy should be read together with the uk99 Terms & Conditions and our Responsible Gaming policy. Together these three documents form the complete agreement governing your use of the uk99 platform. All documents are written in English, which is the governing language for any interpretation or dispute regarding their content.

If you do not agree with any part of this Privacy Policy, you must discontinue your use of the uk99 platform immediately and may request account closure by contacting our support team at [email protected].

2 Data We Collect

uk99 collects several categories of personal data in order to operate the platform, verify player identities, process payments, prevent fraud, and fulfil legal obligations. The categories of data we may collect are described below.

2.1 Identity and Contact Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used for age verification — uk99 is strictly 21+ only).
• Residential address, including city, district, and postal code.
• Mobile phone number registered to your account.
• Email address used for account communications and security alerts.
• Nationality and country of residence.

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (National Identity Card, passport, or driving licence).
• Proof of address documents (utility bills, bank statements, or official government correspondence dated within 90 days).
• Proof of payment method ownership (screenshots or confirmations of bKash, Nagad, Rocket, or bank account registered in your name).
• Selfie or live photo submissions where required for enhanced identity verification.

2.3 Financial and Transaction Data

• Deposit and withdrawal amounts, dates, and transaction reference numbers.
• Payment method details, including mobile banking account identifiers (bKash, Nagad, Rocket numbers) and bank account reference details.
• Account balance history and bonus credit activity.
• Bet placement records, game participation history, and win/loss summaries.

2.4 Technical and Usage Data

• IP address, device type, operating system, and browser version.
• Geolocation data derived from your IP address or, where permitted, GPS data from mobile devices.
• Session logs, login timestamps, and platform navigation patterns.
• Pages visited, features accessed, search queries entered, and content interactions recorded.
• Performance data including page load times and error reports that help us improve the platform.

2.5 Communications Data

• Support chat transcripts, email correspondence, and any written communications submitted to the uk99 support team.
• Survey responses, feedback submissions, and any voluntary information you choose to share with us.
• Records of complaints and the actions taken in response.

3 How We Collect Your Data

uk99 collects personal data through several distinct channels, each serving a specific operational purpose:

3.1 Direct Submission

The largest volume of personal data we hold is data you provide directly. This includes information entered during the account registration process, details submitted as part of KYC identity verification, payment information provided when making deposits or requesting withdrawals, and communications you initiate with the uk99 support team via live chat or email.

3.2 Automated Collection

When you access the uk99 platform — whether via a web browser on a desktop device, a mobile browser, or any other access method — our servers automatically log technical data about your session. This includes your IP address, device identifiers, browser type and version, operating system, referring URL, and a timestamp record of the pages and features you access. This data collection is standard practice for secure online platform operation and is essential for fraud detection, security monitoring, and responsible gaming compliance.

3.3 Cookies and Tracking Technologies

uk99 uses cookies and similar technologies (including local storage objects and session tokens) to manage your authenticated session, remember your preferences, and collect aggregated analytics data. Please refer to Section 6 of this Policy for a full explanation of how cookies are used and the choices available to you.

3.4 Third-Party Sources

In limited circumstances, uk99 may receive information about you from third-party sources, including:

• Identity verification and KYC service providers who cross-reference your submitted documents against government databases.
• Fraud detection and anti-money laundering (AML) screening services that may flag your details against watchlists or sanctions databases.
• Payment processors who confirm the status and ownership of the payment accounts you use to transact on uk99.

4 Purpose of Processing

uk99 processes your personal data only for clearly defined, lawful purposes. The table below sets out the primary purposes for which we process each category of data, along with the legal basis we rely on for that processing.

uk99 does not process your personal data for purposes incompatible with those listed above. If we intend to use your data for a materially different purpose, we will notify you in advance and obtain any necessary additional consent.

5 Data Sharing and Disclosure

uk99 treats your personal data with strict confidentiality. We do not sell, rent, or trade your personal information to unaffiliated third parties for their own marketing purposes. Data sharing occurs only in the following defined circumstances:

5.1 Service Providers and Processors

We engage carefully selected third-party service providers who process data on our behalf under binding data processing agreements. These providers are permitted to use your data only as directed by uk99 and for no other purpose. Categories of service providers include:

• KYC and Identity Verification Partners: Providers who verify the authenticity of identity documents and confirm your eligibility to use the platform.
• Payment Processors: Including the technical infrastructure partners behind bKash, Nagad, Rocket, Upay, and bank transfer services, who require transaction data to complete payment instructions.
• Fraud Detection and AML Services: Specialist providers who screen transactions and account activity against risk indicators and sanctions lists.
• Game Content Providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive pseudonymised gameplay data necessary to operate their games within the uk99 platform environment.
• Cloud Hosting and Infrastructure: Secure data centre and cloud service providers that host uk99's platform infrastructure under strict contractual data protection obligations.

5.2 Legal and Regulatory Disclosure

uk99 may disclose personal data to law enforcement authorities, regulatory bodies, or other government institutions where we are legally required to do so, or where disclosure is necessary to prevent, detect, or prosecute criminal activity including fraud and money laundering. Such disclosures are made in strict compliance with applicable legal requirements and are limited to the minimum data necessary.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of uk99's business operations, personal data held by uk99 may be transferred to the successor entity as part of that transaction. Any such transfer will be subject to equivalent privacy protections, and affected users will be notified in advance of any material change to how their data is processed.

6 Cookies and Tracking Technologies

uk99 uses cookies and related technologies to operate the platform, maintain your authenticated session, and collect aggregated usage analytics. The following categories of cookies are used:

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in and using core platform features. Analytics and functional cookies can be disabled without affecting your ability to bet or play. uk99 does not use third-party advertising cookies or behavioural tracking cookies for the purpose of serving advertisements on external websites.

7 Data Retention

uk99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory retention obligations, and to resolve any disputes or enforce our agreements. The general retention periods we apply are as follows:

• Active Account Data: Retained for the duration of your account's active status plus a minimum of 5 years following account closure, in compliance with anti-money laundering record-keeping obligations.
• KYC and Identity Documents: Retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction.
• Support Communications: Retained for 3 years from the date of the last communication in a given support thread, or longer where the communication is relevant to an unresolved dispute.
• Technical and Usage Logs: Retained for up to 12 months for security monitoring purposes, after which they are anonymised or deleted.
• Marketing Consent Records: Retained for as long as your marketing consent remains active, plus 3 years following withdrawal of consent.

When personal data is no longer required for any of the above purposes, uk99 will securely delete or irreversibly anonymise it. Anonymised, aggregated data (from which you cannot be identified) may be retained indefinitely for statistical and platform improvement purposes.

8 Your Data Rights

As a user of the uk99 platform, you hold a number of rights in relation to the personal data we hold about you. We are committed to facilitating the exercise of these rights promptly and without unnecessary barriers. Your rights include:

• Right of Access: You may request a copy of all personal data uk99 holds about you. We will provide this within 30 days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating a phone number) can be made directly from your account settings panel.
• Right to Erasure: You may request that uk99 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing was unlawful. Note that certain data must be retained to meet legal obligations even after an erasure request.
• Right to Restriction: You may ask uk99 to restrict the processing of your data in certain circumstances — for example, while the accuracy of your data is being verified, or where you have objected to processing.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that we provide your data in a structured, commonly used, machine-readable format so that it can be transferred to another provider.
• Right to Object: You have the right to object to the processing of your data where that processing is based on legitimate interests, including direct marketing. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place prior to withdrawal.

To exercise any of the above rights, please contact our data team at [email protected] with the subject line "Data Rights Request" and a clear description of your request. We may ask you to verify your identity before processing your request. All requests will be handled within 30 days.

9 Security Measures

uk99 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security controls in place include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and uk99 servers is encrypted using 256-bit SSL/TLS protocols — the same standard used by major international financial institutions.
• Encrypted Data Storage: Sensitive data stored on uk99 servers — including identity documents, payment information, and account credentials — is encrypted at rest using strong encryption algorithms.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. uk99 staff with access to personal data are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication: uk99 offers two-factor authentication (2FA) on player accounts to provide an additional layer of login security. Players are strongly encouraged to enable 2FA.
• Intrusion Detection and Monitoring: Our infrastructure is monitored continuously for unusual activity patterns, unauthorised access attempts, and potential security incidents.
• Penetration Testing: uk99 conducts regular security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a confirmed data breach that poses a risk to player data, uk99 will notify affected users as promptly as possible and take immediate remedial action.

While uk99 employs robust security practices, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for notifying uk99 immediately at [email protected] if you suspect any unauthorised access to your account.

10 Children's Privacy

uk99 employs mandatory age verification as part of the KYC process. Any individual found to be under the age of 21 during or after the verification process will have their account permanently closed. Parents or guardians who believe a minor may have registered an account on the uk99 platform should contact us immediately at [email protected] so that the account can be investigated and closed without delay.

uk99 actively supports responsible gaming and parental controls. We encourage parents to use internet filtering tools and to discuss responsible online behaviour with young people in their household. The minimum age requirement of 21 years is strictly enforced and non-negotiable.

11 Updates to This Privacy Policy

uk99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform operations. When material changes are made, we will notify registered users via the email address associated with their account and display a prominent notice on the uk99 platform at least 7 days before the changes take effect.

Non-material changes — such as typographical corrections, clarifications that do not alter your rights, or formatting updates — may be made without advance notice. The effective date displayed at the top of this page will always reflect the date of the most recent revision.

Your continued use of the uk99 platform after any updated Privacy Policy takes effect constitutes your acceptance of the revised terms. If you do not agree with any changes made to this Policy, you should cease using the platform and request account closure by contacting [email protected].

12 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way uk99 processes your personal data, please reach out through the following channels. All privacy-related correspondence is handled in English:

• General Support & Data Rights Requests: [email protected]
• VIP & Partnerships: [email protected]
• Live Chat: Available 24/7 via the platform — average response time 2–5 minutes

When submitting a data rights request or privacy complaint by email, please use the subject line "Privacy Request" and include your registered account username and a clear description of your query. We will acknowledge your message within 48 hours and provide a full response within 30 days.