ud99 Privacy Policy — Your Data, Protected

1. Introduction

This Privacy Policy describes how ud99 ("Platform", "we", "us") collects, uses, stores, and protects the personal data of users ("Player", "you") who access and use the ud99 platform at ud99.app. By creating an account with ud99 or using any part of the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

ud99 takes data privacy seriously. We collect only the data we genuinely need to provide a safe, fair, and compliant gaming service to players in Bangladesh. We do not collect data speculatively, and we do not monetise player data by selling it to advertisers or data brokers.

2. Data We Collect

ud99 collects personal data in six broad categories. Each category is collected for a specific, documented purpose:

3. How We Use Your Data

ud99 uses your personal data only for the following purposes. We do not use your data for purposes beyond those listed below without obtaining fresh consent:

• Account creation and ongoing management: registering your account, verifying your identity through KYC, and maintaining your player profile throughout the account lifecycle.
• Payment processing: executing deposits and withdrawals via bKash, Nagad, Rocket, and Upay; preventing payment fraud and verifying that payment methods belong to the account holder.
• Platform provision and improvement: delivering games, betting markets, and platform features; diagnosing technical issues; improving platform performance and user experience based on aggregated usage data.
• Regulatory compliance and anti-money laundering: fulfilling our obligations under applicable AML, KYC, and player verification requirements; cooperating with authorities when legally required.
• Responsible gaming: monitoring gaming patterns to identify potential problem gambling behaviour and contacting players who may benefit from responsible gaming tools such as deposit limits or self-exclusion.
• Promotional communications: sending you offers, bonuses, and seasonal promotions relevant to your gaming activity — only where you have opted in. You may opt out of marketing communications at any time via your account settings or by emailing [email protected].

4. Legal Basis for Processing

ud99 processes personal data on one or more of the following legal grounds depending on the specific processing activity:

• Contractual necessity: processing required to create your account, verify your identity, process payments, deliver games, and fulfil our obligations to you as a player.
• Legal obligation: processing required to comply with applicable AML legislation, KYC requirements, tax reporting obligations, and any lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: processing for fraud detection, platform security, responsible gaming monitoring, and aggregate analytics — where those interests are not overridden by your rights.
• Consent: processing for direct marketing communications, non-essential cookies, and any other processing activity for which consent is specifically sought and given. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Sharing Your Personal Data

ud99 does not sell, rent, or trade personal data to third parties for commercial purposes. We share personal data only in the following limited circumstances:

• Game and platform providers: ud99 works with licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Ezugi, Spribe, and Microgaming. These providers receive session tokens and minimal technical data necessary to deliver their games. They do not receive your full identity or payment data.
• Payment processors: bKash, Nagad, Rocket, and Upay receive the transaction data necessary to process your deposits and withdrawals. These are independent services governed by their own privacy policies.
• KYC and fraud prevention services: ud99 may use third-party identity verification services to confirm player age and identity. These services process only the identity documents you provide and do not have access to your gaming or payment history.
• Legal and regulatory authorities: ud99 will disclose personal data to law enforcement, regulatory bodies, or courts when required to do so by applicable law or valid legal process. ud99 will notify affected players of such disclosures where legally permitted to do so.

6. Cookies and Tracking Technologies

ud99 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and understand how players interact with the site. We use three categories of cookies:

• Essential cookies: Required for the platform to function. These include session authentication cookies, security tokens, and cookies that remember your logged-in state. You cannot opt out of essential cookies while using the platform.
• Functional cookies: Remember your preferences such as language setting, display preferences, and responsible gaming limits you have configured. These are set when you save account preferences.
• Analytics cookies: Collect anonymised data about how players navigate the platform — which pages are visited, how long sessions last, and which features are used most. This data is aggregated and cannot be used to identify individual players. We use this data to improve platform design and performance.

You can manage cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from accessing the platform but may affect certain features. For more detail on the specific cookies ud99 uses, contact [email protected].

7. Data Retention

ud99 retains personal data only for as long as necessary to fulfil the purposes for which it was collected. Specific retention periods are as follows: active account data is retained for the duration of the account relationship; KYC documents and transaction records are retained for a minimum of five years after account closure to comply with AML record-keeping requirements; gaming session logs are retained for a minimum of three years; support communications are retained for two years from the date of the last communication.

When personal data is no longer required and no legal obligation requires its retention, ud99 deletes or anonymises it securely. Anonymised data (from which you can no longer be identified) may be retained indefinitely for aggregate analytics purposes.

8. Data Security

ud99 implements industry-standard security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include 256-bit SSL encryption for all data in transit between your device and our servers; encrypted storage of sensitive account data and KYC documents at rest; strict access controls ensuring that only authorised ud99 personnel can access personal data, and only to the extent required for their role; regular security assessments and vulnerability testing of the ud99 platform; and two-factor authentication options available to all registered players to protect account access.

9. Your Data Rights

As a ud99 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with your registered mobile number and a description of your request:

• Right of access: Request a copy of all personal data ud99 holds about you. We will provide this within a reasonable timeframe following identity verification.
• Right to rectification: Request correction of inaccurate or incomplete personal data we hold about you. Where possible, corrections will be made promptly.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to our legal retention obligations.
• Right to restrict processing: Request that we limit the processing of your personal data in certain circumstances, for example while a dispute about accuracy is resolved.
• Right to object: Object to processing of your personal data where we rely on legitimate interests as the legal basis, including profiling for responsible gaming purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds.

ud99 will respond to all data rights requests within 30 days. If a request is complex or numerous, this period may be extended by up to two further months; we will notify you if an extension is needed. We will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive.

10. Children's Privacy

ud99 is strictly a 21+ platform. We do not knowingly collect personal data from any person under the age of 21. Our registration process includes age verification steps, and our KYC process requires government-issued identity documentation confirming the player's age. If we discover that personal data has been collected from a person under 21, we will immediately close the account, delete all associated data, and return any funds to the verified payment source.

11. Third-Party Links and Services

The ud99 platform integrates third-party game products from licensed providers including Pragmatic Play, Evolution Gaming, Spribe, and others. When you play these games, your interaction is governed partly by the game provider's own terms and data practices. ud99 is not responsible for the privacy practices of third-party game providers. However, as noted in Section 5, the data shared with providers is limited to what is technically necessary to deliver the game session. Payment services (bKash, Nagad, Rocket, Upay) operate under their own privacy policies; ud99 encourages you to review those policies independently.

12. Changes to This Privacy Policy

ud99 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made, we will update the Last Updated date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

Where changes are significant, ud99 will endeavour to notify active players via the mobile number or email address registered on their account. Your continued use of the ud99 platform after any update to this Privacy Policy constitutes your acceptance of the revised policy.

13. Contact Us About Your Privacy

If you have any questions, concerns, or complaints about this Privacy Policy or about how ud99 handles your personal data, please contact our support team at [email protected]. Include your registered mobile number and a clear description of your query. We take all privacy concerns seriously and aim to respond within five business days.

This Privacy Policy was last updated in January 2026. The most current version is always available at ud99.app/privacy-policy. If you are reading a cached or printed version, visit the live page to ensure you are reading the current policy.