uuko Privacy Policy

1. Introduction

uuko (accessible at uuko.vu, hereinafter "the Platform", "we", "us", or "uuko") is committed to protecting the privacy and personal data of all registered users and visitors. This Privacy Policy (hereinafter "the Policy") sets out in clear terms the categories of personal data we collect, the purposes and legal bases for which we process that data, the parties with whom we may share it, the period for which we retain it, and the rights available to you as a data subject.

This Policy applies to all personal data collected through the uuko website, mobile browser interface, and any associated communications channels including support email. It applies equally to users residing in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other locations in Bangladesh from which the Platform is accessed.

uuko reserves the right to update this Policy at any time. Where changes are material, we will notify registered users by email or via a prominent notice on the Platform at least seven days before the changes take effect. The most current version of this Policy is always published at uuko.vu/privacy-policy.

2. Data We Collect

uuko collects only the data that is necessary for the purposes described in this Policy. We do not engage in indiscriminate data collection. The categories of personal data we may collect are described below.

Registration and Account Data

When you create an account on uuko, we collect the information you provide in the registration form, which includes:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (required to verify that you meet the 21+ age requirement).
• Email address and mobile phone number, used for account communications, security alerts, and two-factor authentication.
• Residential address in Bangladesh, collected as part of our Know Your Customer (KYC) process.
• A username selected by you, which is displayed within the Platform's community and gaming features.

Financial and Transaction Data

To process deposits and withdrawals, uuko collects financial data including:

• Payment method identifiers such as your bKash or Nagad mobile wallet number (the last four digits of which are stored for verification purposes; full account numbers are not stored by uuko).
• Transaction history including deposit amounts, withdrawal requests, bet amounts, winnings, bonus credits, and rollover progress.
• Currency balances held in your uuko wallet at any point in time.
• Records of any financial disputes, chargeback requests, or fraud investigations in which your account was involved.

Technical and Usage Data

When you access the Platform, our servers and analytics systems automatically log certain technical data including your IP address, device type, operating system and browser version, the pages you visit and the duration of each visit, clickstream data, session timestamps, and error logs. This data is used to maintain Platform security, detect fraud, optimise performance, and improve the user experience for Bangladesh players. This data is collected automatically and does not require any active input from you.

3. How We Use Your Data

uuko processes your personal data only for specific, legitimate purposes. We do not use your data for purposes incompatible with those stated at the time of collection. The primary purposes for which we process personal data are set out below.

Account Administration

We use your registration data to create and maintain your account, verify your identity and age, process your login sessions, respond to your support enquiries, and send you transaction confirmations. This processing is necessary for the performance of the contract between you and uuko.

Compliance and Regulatory Obligations

uuko is required to process certain personal data to comply with its legal and regulatory obligations. These include:

• Age verification to ensure compliance with the 21+ requirement — we process date-of-birth data for this purpose.
• KYC identity verification, which requires processing copies of government-issued ID documents and proof-of-address documents.
• Anti-money-laundering (AML) screening and transaction monitoring, which requires us to retain financial transaction records for a minimum period mandated by applicable law.
• Responsible gaming monitoring, including tracking gaming session durations, loss patterns, and deposit frequencies to identify potentially at-risk players and intervene appropriately.

Platform Security and Fraud Prevention

We process technical and usage data, together with account data, to detect and prevent fraud, identify duplicate accounts, block access from prohibited jurisdictions, and safeguard the integrity of games and financial transactions. This processing is necessary for the legitimate interests of uuko and its user community.

Marketing Communications

Where you have given your explicit consent, uuko may use your contact details to send you promotional communications about bonuses, new games, seasonal promotions (such as Eid specials, BPL season offers, and Pohela Boishakh rewards), and other Platform updates. You may withdraw your consent to marketing communications at any time by contacting [email protected] or by using the unsubscribe mechanism included in every marketing email. Withdrawing marketing consent does not affect your ability to continue using the Platform.

4. Cookies and Tracking Technologies

uuko uses cookies and similar tracking technologies on the Platform to deliver core functionality, remember your session preferences, and improve the Platform's performance and security.

Essential Cookies

Essential cookies are strictly necessary to operate the Platform. They enable functions such as user session management, login authentication, security token validation, and load balancing across our servers. These cookies cannot be disabled without preventing the Platform from functioning correctly. No consent is required to set essential cookies, as they are necessary for the delivery of a service you have explicitly requested.

Analytics Cookies

With your consent, uuko uses analytics cookies to understand how users navigate the Platform, which pages are most visited, and where users encounter technical difficulties. This data is aggregated and anonymised before analysis and is not used to identify individual users. Analytics data helps us improve the Platform experience for all Bangladesh players. You may withdraw consent to analytics cookies at any time. Withdrawal of analytics cookie consent does not affect your ability to use the Platform.

• Session cookies — expire when you close your browser and are used to maintain your login state during a single visit.
• Persistent cookies — remain on your device for a defined period (not exceeding 12 months) and are used to remember your preferences on return visits.
• Third-party analytics cookies — set by our analytics provider. These cookies process anonymised usage data only and cannot identify you personally.

5. Data Sharing and Disclosure

uuko does not sell, rent, or trade your personal data to any third party. We share your personal data only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

Service Providers

uuko engages trusted third-party service providers to support Platform operations. These providers process personal data on our behalf and are bound by data processing agreements that prohibit them from using your data for any purpose other than delivering the contracted service. Service providers include:

• Payment processors and mobile financial service providers (including bKash, Nagad, Rocket, and Upay gateway operators) who process transaction data necessary to complete deposits and withdrawals.
• Game content providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) who may receive a session token and anonymised player ID to initialise game sessions. Full personal identity data is not shared with game providers.
• Identity verification and KYC service providers who process copies of identity documents to complete the verification process required under our age and identity verification obligations.
• IT infrastructure and hosting providers who provide the servers, databases, and network infrastructure on which the Platform operates. These providers access personal data only to the extent necessary to perform their infrastructure services.
• Customer support platform providers who may process your support correspondence and account data in order to help our support team respond to your enquiries efficiently.

Legal and Regulatory Disclosure

uuko may disclose personal data to law enforcement authorities, financial intelligence units, regulatory bodies, or courts of competent jurisdiction where we are required to do so by applicable law, by a valid court order, or where disclosure is necessary to prevent or detect a serious crime including fraud, money laundering, or terrorist financing. In such cases, uuko will disclose only the minimum data required and, where legally permissible, will notify you of the disclosure.

6. Data Retention

uuko retains your personal data only for as long as is necessary to fulfil the purposes described in this Policy, unless a longer retention period is required by applicable law or regulatory obligation. The retention periods applied to each category of data are described below.

Active Account Data

While your account is active, we retain all account, financial, and technical data necessary to provide the Platform services to you. You may update your personal information at any time via your account settings or by contacting [email protected].

Post-Closure Retention

Following closure of your account, uuko retains certain categories of data for the minimum periods required by applicable law and regulatory obligation. Specifically:

• Financial transaction records are retained for a minimum of five years post-closure to comply with anti-money-laundering obligations.
• KYC identity verification documents are retained for a minimum of five years post-closure or for the period required by applicable financial regulation, whichever is longer.
• Account activity logs and fraud investigation records are retained for a period of three years post-closure or until the conclusion of any related legal proceeding, whichever is later.
• Marketing consent records are retained for three years from the date of your last interaction with a uuko marketing communication, to demonstrate compliance with consent requirements.

7. Your Data Rights

As a user of the uuko Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and a description of the right you wish to exercise. We will respond to all verified requests within 30 days.

Right of Access

You have the right to request a copy of the personal data that uuko holds about you, together with information about how it is processed, the categories of data held, the purposes for which it is used, and the parties with whom it has been shared. We will provide this information in a clear, structured format within 30 days of a verified request.

Right to Rectification

You have the right to request correction of any personal data that uuko holds about you that is inaccurate, incomplete, or out of date. You may update most account information directly through your account settings. For data that cannot be self-corrected, please contact [email protected].

Right to Erasure

You have the right to request that uuko delete your personal data. This right is subject to certain limitations: we cannot delete data that we are legally required to retain (such as financial transaction records under anti-money-laundering regulations), data that is necessary to resolve an open dispute or enforce an agreement, or data related to an ongoing fraud or security investigation. Where deletion is possible, we will process verified deletion requests within 30 days.

Right to Object to Marketing

You have the right to object to the processing of your personal data for direct marketing purposes at any time. To opt out of all marketing communications from uuko, please contact [email protected] or use the unsubscribe link included in every marketing email. Your objection will be processed within 48 hours and you will receive no further marketing communications after that point.

8. Data Security

uuko takes data security seriously and implements a range of technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures are reviewed and updated regularly in line with industry best practices.

Technical Safeguards

The Platform uses SSL/TLS encryption on all pages and API endpoints to protect data in transit. Passwords are hashed using a strong one-way hashing algorithm and are never stored in plain text. Database access is restricted to authorised system components only. Sensitive financial data (such as payment account numbers) is tokenised or partially masked in all storage systems.

Organisational Safeguards

Access to personal data within uuko is restricted on a strict need-to-know basis. Employees and contractors who handle personal data are required to complete data protection training and are bound by confidentiality obligations. The following additional controls are in place:

• Regular internal security audits and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• An incident response plan that is activated immediately upon detection of any suspected data breach, with affected users notified promptly in accordance with applicable law.
• Vendor security assessments conducted before engaging any new third-party service provider who will process personal data on our behalf.
• Multi-factor authentication options available to all registered users to protect account access from unauthorised login attempts.

9. Children and Minors

The uuko Platform is strictly intended for adults aged 21 and above. uuko does not knowingly collect personal data from persons under the age of 21. If we become aware that an account has been created by or is being used by a person under 21, we will immediately close that account, void all associated transactions and bonuses, return any deposited funds to the source payment method, and delete all personal data associated with that account to the extent permitted by law.

Reporting Underage Access

If you believe that a person under the age of 21 has registered an account on uuko or is accessing the Platform using another person's credentials, please report this immediately to [email protected]. uuko treats all such reports with the highest priority and will investigate and act within 24 hours of a verified report.

Parental Controls

We strongly encourage parents and guardians to use available device-level parental control tools to prevent minors from accessing online gambling platforms. Recommended steps include:

• Enabling screen-time restrictions and content filtering on all shared or family-accessible devices.
• Keeping account login credentials secure and never sharing them with household members who are under the age of 21.
• Contacting [email protected] immediately if you suspect that a minor has accessed your uuko account.

10. Changes to This Policy

uuko reviews this Privacy Policy at least annually and whenever there is a material change in the way we process personal data. When we make changes, we update the "Last updated" date at the top of this page. Where changes are material — for example, where we add a new category of data processing or a new type of third-party recipient — we will notify registered users by email at least seven days before the changes take effect. The updated Policy will be posted at uuko.vu/privacy-policy on or before the effective date.

Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with the changes, you must stop using the Platform and may request closure of your account by contacting [email protected].

11. Contact and Privacy Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how uuko has handled your personal data, please contact us using the details below. Please note that the email address is provided as plain text only — copy it manually into your email client.

Privacy Contact Details

Privacy and data rights enquiries: [email protected] — available 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6). Please use the subject line "Privacy Enquiry" or "Data Rights Request" so our team can route your message to the appropriate handler. We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 30 days.

12. Governing Law

This Privacy Policy and any disputes arising from or in connection with it shall be governed by and construed in accordance with applicable law. uuko is committed to processing personal data in a manner consistent with internationally recognised data protection principles including purpose limitation, data minimisation, storage limitation, integrity and confidentiality.

These data protection commitments form part of uuko's broader responsible gaming and player protection framework. For full details of our player protection measures, please refer to the uuko Responsible Gaming page and the Terms and Conditions, both of which are available via the links in the footer of this page.