pku9 Privacy Policy
— How We Protect Your Personal Data

This Privacy Policy ("Policy") describes how pku9 ("pku9", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "your", "the Player") who access or use the pku9 website, mobile-optimised platform, casino games, sports betting services, and all associated features available at pku9.io.

pku9 is committed to handling your personal information with transparency, care, and respect. This Policy is designed to give you a clear and complete picture of our data practices so that you can make informed decisions about your use of the pku9 platform. By registering a pku9 account, completing the pku9 login process, or otherwise using any feature of pku9.io, you acknowledge that you have read and understood this Policy.

This Policy should be read alongside the pku9 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions on a data-related matter, this Policy shall prevail.

pku9 collects personal data in two ways: information you provide directly, and information collected automatically when you use the platform.

Information You Provide Directly:

• Registration data: Your full legal name, date of birth, residential address in Bangladesh (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar), and a valid mobile number associated with your bKash, Nagad, or Rocket wallet.
• Identity verification documents: Copies of your National Identity Card (NID), passport, or other government-issued photo identification submitted during the KYC (Know Your Customer) process.
• Financial data: Your mobile financial service account number(s) used for deposits and withdrawals, and records of all transactions conducted on the pku9 platform.
• Communications data: The content of any messages, support tickets, live chat transcripts, or emails you send to the pku9 support team.
• Responsible gaming preferences: Deposit limits, session time reminders, cooling-off periods, or self-exclusion requests you submit through your account settings.

Information Collected Automatically:

pku9 uses the personal data it collects for the following specific purposes:

• Account management: To create and maintain your pku9 account, verify your identity, and facilitate your pku9 login experience securely.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to maintain accurate financial records.
• Legal compliance: To fulfil anti-money-laundering (AML), Know Your Customer (KYC), and other regulatory obligations applicable in Bangladesh.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, bonus abuse, account takeover attempts, and other security threats on the pku9 platform.
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance with technical or account-related issues.
• Platform improvement: To analyse usage patterns, conduct A/B testing, and improve the design, features, and performance of pku9 for all Bangladeshi players.
• Responsible gaming: To monitor gameplay patterns for indicators of problem gambling and to administer self-exclusion, deposit limits, and other responsible gaming tools in accordance with your preferences.
• Promotional communications: To send you information about pku9 bonuses, promotions, and seasonal offers — only where you have provided explicit consent to receive such communications.

pku9 does not use your personal data to make fully automated decisions that produce significant legal effects on you without human review.

pku9 processes your personal data on the following legal bases, depending on the nature of the processing activity:

• Performance of a contract: The majority of our data processing is necessary to provide the services you have requested by registering with pku9 — including account management, game access, and payment processing.
• Legal obligation: Certain processing activities — particularly KYC verification, AML screening, and the retention of financial transaction records — are required by applicable law in Bangladesh and cannot be opted out of.
• Legitimate interests: pku9 processes some data on the basis of its legitimate interest in fraud prevention, platform security, and service improvement, provided that this interest is not overridden by your rights and freedoms.
• Consent: Where we send you marketing communications or use non-essential cookies, we do so on the basis of your explicit, freely given, and revocable consent.

pku9 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit pku9.io. They allow pku9 to recognise your device across sessions and to remember your preferences.

pku9 uses the following categories of cookies:

• Strictly necessary cookies: These are essential for the platform to function. They include session authentication tokens that keep you logged in during your pku9 session and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without breaking platform functionality.
• Functional cookies: These remember your preferences — such as your preferred language, game lobby view, and notification settings — so you do not need to re-configure them on each visit.
• Analytics cookies: pku9 uses first-party analytics cookies to understand how players navigate the platform, which game categories are most popular, and how the pku9 login flow performs. This data is used in aggregate and does not identify individual players.
• Marketing cookies: These are used only with your consent to measure the effectiveness of pku9's promotional campaigns. No marketing cookies are placed until you have provided affirmative consent.

You may manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use the pku9 platform, including the pku9 login function.

pku9 does not sell your personal data. We share personal data with third parties only in the following limited and controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, and Upay receive your mobile financial service account number and transaction amounts as necessary to process your deposits and withdrawals. Each processor operates under its own privacy policy and is bound by applicable financial regulation in Bangladesh.
• Identity verification providers: Third-party KYC service providers may receive copies of your identity documents and personal details to verify your age and identity in compliance with our legal obligations.
• Fraud and risk management systems: Automated fraud detection platforms may receive device fingerprint data, IP address information, and behavioural signals to identify and prevent fraudulent activity on the pku9 platform.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and game session data to enable game functionality and resolve game-related disputes. They do not receive your full name, contact details, or payment information.
• Law enforcement and regulatory authorities: pku9 will disclose personal data to competent authorities in Bangladesh and internationally where required to do so by law, court order, or regulatory direction.

All third parties with whom pku9 shares personal data are required under contract to process that data only for the specified purpose, to apply appropriate technical and organisational security measures, and to comply with applicable data protection law.

pku9 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any overriding legal retention requirements. The following general retention periods apply:

• Account data: Retained for the duration of your active account relationship with pku9, and for a period of five (5) years following account closure, in order to comply with AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of seven (7) years following the date of each transaction, in line with financial record-keeping obligations applicable in Bangladesh.
• Identity verification documents: Retained for the duration of your account and for five (5) years after closure, or for such longer period as may be required by applicable law.
• Customer support communications: Retained for three (3) years from the date of the last communication in a support ticket or thread.
• Analytics and usage data: Retained in aggregated, anonymised form indefinitely for platform improvement purposes. Individual-level usage logs are deleted or anonymised within twenty-four (24) months.
• Marketing consent records: Retained for three (3) years from the date consent was given or withdrawn, as evidence of compliance.

Upon expiry of the applicable retention period, pku9 will securely delete or anonymise your personal data in a manner that prevents its reconstruction or re-identification.

pku9 applies a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport security: All data in transit between your device and pku9 servers is protected using TLS 1.2 or higher. This applies to every interaction on the platform, including the pku9 login process and all financial transactions.
• Data at rest encryption: Sensitive personal data stored on pku9 infrastructure — including identity documents and payment details — is encrypted using industry-standard symmetric encryption algorithms.
• Access controls: Access to personal data held by pku9 is restricted on a strict need-to-know basis. Internal systems require multi-factor authentication for administrative access, and all access events are logged and audited.
• Password security: Passwords are stored using a one-way cryptographic hashing function. Plain-text passwords are never stored, logged, or transmitted by pku9 systems.
• Intrusion detection: pku9's infrastructure is monitored continuously for unusual access patterns, potential intrusions, and indicators of compromise.
• Staff training: All pku9 personnel with access to personal data receive mandatory data protection and security awareness training on a regular basis.

While pku9 takes all reasonable steps to protect your data, no online platform can guarantee absolute security against all conceivable threats. You are responsible for maintaining the security of your own device and your pku9 login credentials. If you believe your account has been compromised, please contact pku9 support immediately.

As a pku9 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact pku9 customer support. We will respond to all valid requests within thirty (30) calendar days:

• Right of access: You may request a copy of the personal data pku9 holds about you, along with information about how and why it is being processed.
• Right to rectification: If any personal data pku9 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: In certain circumstances — for example, where data is no longer necessary for the purpose for which it was collected — you may request that pku9 delete your personal data. This right is subject to overriding legal retention obligations; pku9 may be required to retain certain data even following an erasure request.
• Right to restriction: You may request that pku9 restrict the processing of your data in certain circumstances, for example where you contest its accuracy while a correction is being verified.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, you may request that pku9 provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of pku9's legitimate interests. You also have an unconditional right to object to direct marketing at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Please note that exercising some of these rights may affect your ability to use certain features of the pku9 platform. For example, requesting erasure of your identity verification data may render pku9 unable to process future withdrawal requests pending re-verification.

pku9 is strictly an adult platform. The pku9 platform is not directed at, and must not be used by, any individual under the age of 21. pku9 does not knowingly collect personal data from anyone under 21 years of age.

Where pku9 discovers or has reasonable grounds to suspect that a registered account is held by an individual under the age of 21, that account will be immediately suspended. Any personal data collected in connection with an underage account will be deleted as promptly as technically practicable, subject to any retention obligations required by law in connection with the investigation.

If you are a parent or guardian and believe that your child has registered an account on pku9, please contact our support team immediately so that we can investigate and take appropriate action.

pku9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the features of the pku9 platform. Where changes are material — meaning they affect your rights or how we use your data in a significant way — we will notify registered players via email or on-platform notification at least seven (7) days before the revised Policy takes effect.

Minor clarifications, corrections of typographical errors, or formatting changes may be made without prior notice. The "Last Updated" date at the top of this Policy will always reflect the date on which the most recent version was published.

Your continued use of the pku9 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised version. We encourage you to review this Policy periodically to stay informed about how pku9 protects your personal data.

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have a concern about how pku9 has handled your personal data, please contact our support team using the details below:

• Email (plain text — not a link): [email protected]
• Support hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)

We take all privacy concerns seriously and will investigate every complaint thoroughly. Our target response time for data-related enquiries is thirty (30) calendar days from receipt of your request. Complex requests may require additional time, in which case we will notify you of the expected timeframe.

If you are not satisfied with the way in which pku9 has handled your personal data or responded to your complaint, you have the right to escalate the matter to the relevant data protection authority or competent court in Bangladesh.