uu8j Privacy Policy —
How We Handle Your Data

uu8j ("the Company", "we", "us", "our") operates the online betting and casino platform accessible at uu8j.io (the "Platform"). For the purposes of this Privacy Policy, uu8j is the data controller — meaning we determine the purposes and means by which your personal data is collected and processed.

The Platform is designed and operated to serve players based in Bangladesh and is offered entirely in the English language. All data processing activities described in this policy are conducted with respect for player privacy and in accordance with internationally recognised data protection principles.

If you have any questions about this Privacy Policy or how your personal data is handled, you may contact our support team directly. Our contact email is [email protected] — please note this address is for correspondence only and is not a clickable link.

We collect personal data through several channels: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and in limited circumstances from third-party verification or payment providers. The categories of data we collect include the following:

We do not knowingly collect sensitive personal data beyond what is necessary for identity verification and legal compliance obligations. Where sensitive data such as government-issued identity documents is collected, it is handled with enhanced security controls and access restrictions.

uu8j processes your personal data for specific, defined purposes only. We do not process data in ways that are incompatible with the original purpose of collection. The primary uses of your data are as follows:

• Account Creation and Management: To register your Account, verify your identity, maintain your Account preferences, process your deposits and withdrawals, and communicate Account-related updates to you.
• Transaction Processing: To facilitate deposits via bKash, Nagad, Rocket, Upay, and card payment networks, and to process withdrawal requests to your designated payment method. Financial data is shared with payment processors solely to execute your requested transactions.
• Identity and Age Verification: To confirm that you meet the minimum age requirement of 21 years and that the identity you registered with is genuine. We may use third-party verification services for this purpose.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, account takeover attempts, bonus abuse, and other security threats. Technical Data and Financial Data are analysed for anomalous patterns that may indicate wrongdoing.
• Responsible Gaming Monitoring: To monitor player activity for indicators of problem gambling behaviour, to apply and track deposit limits and self-exclusion settings, and to provide intervention where patterns of concern are identified.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and maintain a record of support interactions for quality assurance and training purposes.
• Platform Improvement: To analyse Usage Data in aggregate form to understand how the Platform is used, identify technical issues, improve game offerings, and optimise the user experience for players across Bangladesh.
• Legal and Regulatory Compliance: To fulfil obligations under applicable law, respond to lawful requests from government or law enforcement authorities, and maintain records required for audit or regulatory review purposes.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may withdraw consent at any time. See Section 10 for full details.

Each processing activity carried out by uu8j relies on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the Terms and Conditions you accepted at registration — including Account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable laws — including anti-money laundering obligations, age verification requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing necessary for our legitimate business interests — including fraud detection, platform security, responsible gaming monitoring, and analytics — where those interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit consent — primarily for direct marketing communications. Where consent is the basis, you retain the right to withdraw it at any time without affecting the lawfulness of prior processing.

uu8j does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Data sharing is limited to the following categories of recipients, each bound by confidentiality obligations and data protection standards consistent with this policy:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card payment networks receive the minimum financial data necessary to process your deposit or withdrawal. These providers operate under their own privacy frameworks and are independently regulated.
• Identity Verification Providers: Third-party Know Your Customer (KYC) service providers who verify government-issued documents and perform age and identity checks on our behalf. These providers are contractually prohibited from using your data for any purpose beyond verification.
• Game Technology Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive the minimum data required to deliver game content and maintain game integrity — typically a pseudonymous player identifier and session token rather than full identity data.
• Analytics and Technology Partners: Service providers who assist with platform performance monitoring, fraud detection, and technical infrastructure. Access is limited to aggregated or pseudonymised data wherever possible.
• Law Enforcement and Regulatory Authorities: We may disclose personal data to competent authorities where required by law, court order, or where we have a good-faith belief that disclosure is necessary to prevent fraud, protect safety, or comply with a legal obligation. We will notify you of such disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business assets, your personal data may be transferred as part of that transaction. You will be notified prior to any such transfer and your data will remain subject to this Privacy Policy.

uu8j uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. They serve the following functions:

• Essential Cookies: Required for the Platform to function correctly. These include session authentication cookies, load-balancing tokens, and security tokens. Without these, you cannot log in or place wagers. These cookies cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, display options, and last-used payment method to provide a more personalised experience on return visits.
• Analytics Cookies: Collect aggregated information about how players navigate the Platform — which pages are visited, how long sessions last, and which features are used most. This data informs platform improvements. Analytics data is pseudonymised and not used to identify individual players.
• Security and Fraud Detection Cookies: Used by our fraud prevention systems to recognise returning devices, detect unusual access patterns, and flag potential account takeover attempts.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing the Platform, though some features may function differently. Note that disabling essential cookies will prevent you from logging in or using core Platform features.

uu8j retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Active Account Data: Retained for the full duration of your Account's existence plus a minimum of 5 years following permanent closure, to satisfy anti-money laundering record-keeping obligations.
• Transaction Records: Financial transaction logs are retained for a minimum of 7 years from the date of each transaction in accordance with financial compliance requirements.
• Identity Verification Documents: Copies of government-issued documents submitted for KYC purposes are retained for 5 years following Account closure, after which they are securely deleted.
• Customer Support Communications: Support tickets and live chat records are retained for 3 years following resolution to support dispute resolution and quality review purposes.
• Marketing Consent Records: Records of marketing consent and withdrawal are retained for the duration of the Account plus 3 years, as evidence of compliance with consent obligations.
• Technical and Usage Logs: Server logs and session data are retained for 12 months in rolling format for security and platform diagnostics purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data (which no longer identifies any individual) may be retained indefinitely for statistical analysis and platform development purposes.

uu8j implements a multi-layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• TLS/SSL Encryption: All data transmitted between your device and the uu8j Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. Our SSL certificate ensures that data in transit cannot be intercepted by third parties.
• Encryption at Rest: Sensitive data — including identity documents and financial records — is encrypted at rest within our database infrastructure using AES-256 encryption.
• Access Controls: Access to personal data within uu8j is restricted to personnel who have a legitimate business need to access it. Role-based access controls and audit logging ensure that internal access is monitored and accountable.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their uu8j Accounts. 2FA provides a second layer of protection against unauthorised access even where login credentials are compromised.
• Intrusion Detection and Monitoring: Automated systems continuously monitor network traffic and application activity for indicators of unauthorised access, data exfiltration, or malicious behaviour.
• Data Breach Response: In the event of a personal data breach that poses a risk to your rights and interests, uu8j will notify affected players and relevant authorities within the timeframe required by applicable law, and take immediate remedial action to contain and assess the breach.

While uu8j takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your own Account credentials secure and for notifying us immediately if you suspect any unauthorised activity on your Account.

As a player whose personal data is processed by uu8j, you hold the following rights in relation to your information. To exercise any of these rights, please contact our support team in writing at [email protected]. We will respond to all valid requests within 30 calendar days.

uu8j may send you promotional communications — including bonus offers, seasonal promotions (such as those tied to Eid, BPL, or IPL seasons), new game announcements, and platform updates — where you have consented to receive them at registration or via your Account settings.

• Marketing communications are sent via email and in-Platform notification. We do not send unsolicited SMS marketing to your mobile number without separate explicit consent.
• You may withdraw consent to marketing communications at any time by updating your notification preferences within your Account settings, or by contacting support. Withdrawal of consent does not affect the lawfulness of any marketing communications sent prior to withdrawal.
• Even where you have opted out of marketing, we will continue to send you transactional communications that are essential to the operation of your Account — such as deposit confirmations, withdrawal notifications, security alerts, and policy update notices. These are not marketing communications and cannot be opted out of while your Account remains active.
• We do not share your contact details with third-party advertisers for their own marketing purposes. All promotional communications you receive originate from uu8j directly.

The uu8j Platform is strictly intended for individuals aged 21 and above. We do not knowingly collect, process, or retain personal data belonging to any person under the age of 21. Age verification is conducted as part of the registration process and may be reinforced at any point during the Account lifecycle.

• If uu8j becomes aware that personal data has been collected from a person under 21 years of age, that data will be deleted promptly and the associated Account will be permanently closed. Any funds deposited by an underage player will be returned to the originating payment method following investigation.
• Parents and guardians who believe a minor may have accessed the Platform using their device or payment method should contact support immediately. uu8j takes such reports seriously and will investigate and act upon them without delay.
• We recommend that adults who share devices with minors use available parental controls and consider enabling Account-level PIN protection on their uu8j Account to prevent unauthorised access.

uu8j reserves the right to update or modify this Privacy Policy at any time. When we make material changes, we will publish the revised policy on the Platform with an updated effective date and, where the change is significant, notify registered players by email or in-Platform notification at least 7 days before the change takes effect.

• Continued use of the uu8j Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated policy, you should close your Account and cease using the Platform before the effective date.
• Minor updates — such as corrections of typographical errors, clarifications that do not affect the substance of your rights, or changes to contact details — may be made without prior notice. The effective date at the top of this policy will always reflect when it was last substantively revised.
• We encourage you to review this Privacy Policy periodically to remain informed of how your personal data is handled. The most current version of this policy is always available at uu8j.io/privacy-policy.

For any privacy-related enquiries, to exercise your data rights, or to report a suspected data breach affecting your Account, please contact our support team at [email protected]. This is a plain-text address and is not a clickable link.