kul9 Privacy Policy — Your Data, Explained Clearly

kul9 collects personal data from you in two primary ways: information you provide directly when you register and use the platform, and information collected automatically through your use of the kul9 website. We only collect data that serves a legitimate, defined purpose in connection with our services.

Data you provide directly to kul9:

Data collected automatically when you use kul9:

• Device and Technical Data: IP address, browser type and version, operating system, screen resolution, and device identifiers.
• Usage Data: Pages visited on kul9, time spent on each section, search queries within the platform, game sessions played, bet slip history, and navigation paths.
• Location Data: Approximate geographic location derived from your IP address. kul9 does not collect precise GPS-level location data.
• Cookie and Tracking Data: Session identifiers, preference settings, and analytics identifiers stored via cookies and similar technologies. See Section 4 for full details.

kul9 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health information, or political opinions. If you voluntarily disclose such information in a support message, it will be used only to address your enquiry and will not be stored in any profiling system.

kul9 uses your personal data only for purposes that are directly connected to delivering and improving our betting and casino services, fulfilling our legal obligations, and protecting the safety and integrity of the platform. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected.

The specific purposes for which kul9 processes your personal data are:

• Account management: Creating, maintaining, and securing your kul9 account, including login authentication and password recovery.
• Transaction processing: Executing deposits and withdrawals in ৳ BDT via bKash, Nagad, Rocket, Upay, and card payment providers; verifying payment method ownership; and maintaining accurate transaction records.
• Identity and age verification: Confirming that you are at least 18 years of age and that the identity information you have provided is accurate. This is a legal and responsible gaming obligation that kul9 takes seriously.
• Customer support: Responding to your enquiries, resolving disputes, and managing complaints submitted via email or live chat.
• Responsible gaming monitoring: Identifying patterns of play that may indicate problem gambling behaviour, enforcing self-exclusion and deposit limit requests, and complying with responsible gaming obligations.
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, multi-accounting, and any other conduct that breaches our Terms & Conditions.
• Platform improvement: Analysing aggregated usage data (which does not identify you individually) to improve the kul9 website experience, optimise game loading performance, and prioritise new features.
• Legal compliance: Retaining records as required by applicable law, responding to lawful requests from relevant authorities, and enforcing our Terms & Conditions.
• Marketing communications: Sending you promotional offers, bonus notifications, and seasonal promotions — but only if you have provided your explicit consent to receive marketing messages. You may withdraw consent at any time by contacting [email protected].

kul9 will never use your personal data to make fully automated decisions — without any human involvement — that produce significant legal or similarly significant effects on you. Any account restriction or closure decision of material consequence involves review by a member of the kul9 compliance or support team.

kul9 does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only with parties who are contractually obligated to handle your data securely and in accordance with applicable privacy standards.

Categories of third parties with whom kul9 may share your data:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card networks (Visa, Mastercard) receive only the transaction data necessary to process your deposit or withdrawal. These providers operate under their own regulatory frameworks and privacy policies.
• Identity verification providers: Where kul9 uses a third-party KYC service to verify your identity documents, that provider receives a copy of the document you submit and returns a verification result to kul9. The document copy is not retained by the verification provider beyond the period required for the check.
• Game content providers: When you play a game supplied by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, the game engine receives a session token and your account balance data. These providers do not receive your name, mobile number, or identity documents.
• Analytics and platform infrastructure providers: kul9 uses server-side analytics tools to monitor platform performance and security. These tools process technical and usage data only in aggregated or pseudonymised form.
• Legal and regulatory authorities: kul9 will disclose personal data to law enforcement, government bodies, or other authorities where required to do so by applicable law, a court order, or a lawful regulatory request. kul9 will not disclose more data than is strictly required to comply with such a request.

In the event that kul9 undergoes a business transfer, merger, or acquisition, your personal data may form part of the assets transferred to the successor entity. You will be notified via your registered email address before your data is transferred to an entity whose privacy practices differ materially from this policy.

kul9 uses cookies and similar technologies (such as local storage and session tokens) to deliver a functional, personalised, and secure platform experience. A cookie is a small text file placed on your device by a web server when you visit a website. Cookies do not execute code and cannot deliver viruses or malware.

The categories of cookies used by kul9 are:

You can manage or delete cookies at any time through your browser settings. The major browsers — Chrome, Firefox, Safari, Edge, and Samsung Internet (commonly used on Android devices in Bangladesh) — all provide cookie management tools in their privacy or settings menus. Please note that disabling strictly necessary or security cookies will impair your ability to use kul9 effectively.

kul9 does not use third-party advertising cookies or cross-site tracking cookies that follow your activity across websites outside of the kul9 platform.

kul9 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. No online platform can guarantee absolute security; however, kul9's security architecture is built to industry standards and is reviewed on an ongoing basis.

Key security measures in place at kul9 include:

• SSL/TLS encryption: All data transmitted between your browser and the kul9 server is encrypted using Transport Layer Security (TLS). Look for the padlock icon in your browser's address bar when visiting kul9.net.
• Password hashing: Account passwords are never stored in plain text. kul9 uses a strong one-way cryptographic hashing algorithm so that even kul9 staff cannot retrieve your password — only reset it.
• Access controls: Access to personal data within kul9's internal systems is restricted on a strict need-to-know basis. Only designated compliance, finance, and support personnel may access account-level personal data, and all such access is logged.
• Secure payment tokenisation: kul9 does not store full payment credentials on its own servers. Payment method details are tokenised by the respective gateway provider (bKash, Nagad, Rocket, etc.) and only a secure token is retained by kul9 for future transaction matching.
• Intrusion detection: kul9's infrastructure includes automated monitoring for unusual traffic patterns, login anomalies, and potential data exfiltration attempts. Security alerts are reviewed by the technical team on a 24/7 basis.
• Vulnerability assessments: kul9 conducts periodic security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.

In the event of a data security incident that affects your personal information, kul9 will notify you via your registered email address as promptly as practicable, describe the nature of the incident, and explain the steps being taken to address it.

kul9 retains your personal data only for as long as it is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable legal and regulatory obligations. Once your data is no longer required for any active or legitimate purpose, kul9 will securely delete or anonymise it.

Indicative retention periods by data category:

Where you exercise your right to erasure (see Section 7) and kul9 is not legally prevented from complying, your personal data will be deleted or anonymised within 30 days of receipt of a valid erasure request. Data subject to an ongoing legal hold or active investigation will be retained until that matter is resolved.

As a kul9 account holder, you have the following rights in relation to your personal data. kul9 is committed to honouring these rights promptly and without undue obstacle.

• Right of Access: You have the right to request a copy of the personal data kul9 holds about you. kul9 will provide this information in a clear, readable format within 30 days of a valid request.
• Right of Rectification: If any personal data kul9 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For basic contact details, you may update these directly within your account settings. For identity or financial data, contact [email protected].
• Right to Erasure: In certain circumstances you have the right to request that kul9 delete your personal data. kul9 will comply unless retention is required for legal compliance, fraud prevention, or dispute resolution purposes.
• Right to Restrict Processing: Where you contest the accuracy of your data, or where processing is unlawful but you prefer restriction over deletion, you may request that kul9 limit its processing of your data while the matter is under review.
• Right to Data Portability: Where technically feasible, you may request your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on kul9's legitimate interests where you believe your interests override those of kul9.
• Right to Withdraw Marketing Consent: If you have consented to receive marketing communications from kul9, you may withdraw that consent at any time by emailing [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the rights listed above, contact the kul9 privacy team at [email protected] with the subject line "Privacy Rights Request". Please include your registered username or email address so we can locate your account. kul9 will respond to all privacy rights requests within 30 calendar days. Where a request is complex or high in volume, kul9 may extend this period by a further 30 days with prior notification.

kul9 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or improvements to our platform. When we make a material change to this policy, we will publish the updated version on this page with a revised effective date and, where the change significantly affects how your data is used, notify you via your registered email address.

Minor clarifications, corrections of typographical errors, or reformatting of existing content do not constitute material changes and may be made without specific notification. We encourage you to review this Privacy Policy periodically to stay informed about how kul9 handles your personal data.

Continued use of the kul9 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any change to this policy, you should discontinue use of the platform and contact [email protected] to request account closure and data deletion in accordance with Section 7 above.

If you have any questions about this Privacy Policy or about how kul9 handles your personal data, please contact us at [email protected]. Our support team is available 24 hours a day, 7 days a week, and responds to all privacy-related enquiries within 4 hours (Bangladesh Standard Time, UTC+6).