uu99 Privacy Policy
How We Handle Your Data

For the purposes of this Privacy Policy, uu99 (accessible at uu99.bio) acts as the data controller in respect of all personal data collected from players who register accounts, make deposits, place wagers, or interact with any service offered through the uu99 platform. References to "uu99", "we", "us", or "our" throughout this document refer to the data controller entity operating the uu99 brand.

uu99 is a digital platform principally serving players based in Bangladesh, with all primary services, payment integrations, and customer support channels oriented toward the Bangladeshi market. All data processing activities described in this Privacy Policy are conducted in the context of providing online casino and sports betting services to adult players aged 18 and above residing in Bangladesh.

If you have any questions, concerns, or requests relating to your personal data, you may contact uu99's support team at any time via live chat (available 24/7 with a response time under 2 minutes) or by writing to [email protected]. All written privacy requests submitted by email will be acknowledged within 2 business days and resolved within 10 business days wherever possible.

uu99 processes your personal data only when there is a valid legal basis for doing so. The following legal bases apply to the data processing activities described in this Privacy Policy, depending on the specific purpose for which data is used.

Contractual Necessity: The majority of data processing on uu99 is necessary to perform the contract between you (the player) and uu99 (the platform). This includes processing your registration details to create and maintain your account, processing financial data to execute deposits and withdrawals in BDT via bKash, Nagad, Rocket, and Upay, and processing account activity data to deliver games, display balances, and record bet outcomes.

Legal Obligation: uu99 is required to collect and retain certain categories of data — in particular KYC identity documents and transaction records — to comply with applicable anti-money-laundering (AML) obligations and to prevent financial crime. This data processing is not optional; it is a legal requirement that applies regardless of your consent preferences.

Legitimate Interests: uu99 processes technical data (IP addresses, device identifiers, session data) based on our legitimate interests in maintaining platform security, detecting and preventing fraud, identifying multi-accounting, and ensuring that the platform functions reliably for all players. We have assessed these legitimate interests and concluded that they do not override your fundamental privacy rights.

Consent: Where uu99 sends you promotional communications — including bonus offers, tournament announcements, and seasonal promotions — we do so on the basis of your explicit consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to your withdrawal.

uu99 does not sell, rent, or trade your personal data to any third party. Data is shared with external parties only where it is necessary to deliver our services, comply with a legal obligation, or protect the security and integrity of the platform. All third parties with whom uu99 shares data are contractually required to use that data solely for the specific purpose for which it was shared and to apply data security standards consistent with uu99's own.

Payment Processors: To process your deposits and withdrawals in BDT, uu99 shares the minimum necessary financial details with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These providers are independent data controllers in respect of the transaction data they handle under their own privacy policies and terms.

Game Studios and Content Providers: To deliver third-party casino games, uu99 shares session tokens and player identifiers with game studio providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive only pseudonymous identifiers — not your full name, contact details, or financial data. Game studio data handling is governed by their own terms and data agreements with uu99.

Identity Verification Services: Where uu99 uses a third-party KYC verification provider to assist with document review and identity confirmation, your identity documents and personal identifiers are shared with that provider solely for the purpose of completing the verification check. KYC providers are contractually prohibited from using this data for any other purpose.

Legal and Regulatory Authorities: uu99 may disclose personal data to financial intelligence units, law enforcement agencies, or regulatory bodies where required by applicable law, court order, or where uu99 has a good-faith belief that such disclosure is necessary to prevent criminal activity, protect the safety of any person, or protect the rights and property of uu99.

Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of uu99's assets, player data may be transferred to the acquiring entity. In such circumstances, uu99 will provide notice to affected players and ensure that the acquiring entity is bound by privacy obligations at least as protective as those in this policy.

uu99 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or to comply with applicable legal, regulatory, or contractual requirements. The following retention periods apply to the main categories of personal data held by uu99.

Active Accounts: Personal data associated with your active uu99 account is retained for the full duration of your account's existence and for a defined period following account closure to comply with AML record-keeping obligations and to handle any retrospective disputes or complaints.

Financial and Transaction Records: Records of all deposits, withdrawals, and wagers in BDT are retained for a minimum of 5 years following the date of the transaction. This retention period reflects standard financial record-keeping requirements applicable to payment service operations.

KYC Documentation: Identity documents submitted for KYC verification (national ID cards, passports, proof of address) are retained for the duration of your account plus a minimum of 5 years following account closure.

Support Communications: Live chat transcripts and support email records are retained for a minimum of 2 years to allow for complaint review and quality assurance purposes.

Marketing Data: Opt-in records and promotional communication logs are retained for as long as your marketing consent is active plus 2 years following your withdrawal of consent, to demonstrate compliance with consent obligations.

Anonymised Analytics Data: Aggregated, anonymised platform usage data — which cannot be linked back to individual players — may be retained indefinitely for platform improvement purposes.

When personal data is no longer required under the applicable retention period, uu99 will securely delete it or irreversibly anonymise it so that it can no longer be associated with your identity.

uu99 applies a layered approach to data security, combining technical controls, operational procedures, and access management policies to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. No online platform can guarantee absolute security, but uu99 takes all reasonable and proportionate measures to minimise data security risks.

Encryption in Transit: All data exchanged between your device and the uu99 platform is encrypted using SSL/TLS protocols. This applies to every interaction — from the initial page load and login through to deposit requests, game sessions, and account settings changes. Unencrypted HTTP connections are not permitted on the uu99 platform.

Encryption at Rest: Sensitive personal data including KYC documents, financial records, and authentication credentials is stored in encrypted form on uu99's servers. Encryption keys are managed under strict access controls and are rotated on a defined schedule.

Access Controls: Access to player personal data within uu99's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data required to perform their specific job function. All internal access to player data is logged and subject to periodic audit review.

Password Security: uu99 does not store your account password in plain text. Passwords are hashed using industry-standard cryptographic algorithms before storage. uu99 staff cannot view your password and will never ask you to share it. If you forget your password, you must use the platform's secure password-reset process.

Fraud and Abuse Monitoring: uu99 operates real-time monitoring systems designed to detect unusual login activity, suspicious transaction patterns, and potential account compromise. If anomalous activity is detected on your account, uu99 may temporarily restrict access and contact you via your registered email or mobile number to verify your identity.

Your Role in Account Security: You are responsible for maintaining the confidentiality of your uu99 account credentials. Choose a strong, unique password for your uu99 account, do not share your login details with any third party, and log out of your account when using a shared or public device. If you suspect your account has been compromised, contact uu99 support immediately via live chat.