uupk Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1. Introduction

This Privacy Policy ("Policy") describes how uupk ("we", "us", "our") collects, processes, stores, and protects personal information provided by players ("you", "your") when accessing and using the uupk online betting and casino platform available at uupk.ws (the "Platform").

uupk is committed to handling your personal data with the highest level of care and transparency. We recognise that the players who choose to use our platform — including players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar — place real trust in us when they share their personal information, and we take that responsibility seriously.

This Policy should be read in conjunction with the uupk Terms & Conditions and the Responsible Gaming policy, both of which are incorporated by reference. Together these documents form the complete agreement governing your use of the uupk Platform.

2. Data We Collect

uupk collects personal data in several ways: directly from you when you register and use the Platform, automatically through technical systems as you interact with the Platform, and occasionally from trusted third-party service providers who assist in delivering our services. The categories of data we collect are described in the table below.

Category	Examples	Collection Method
Identity Data	Full legal name, date of birth, National ID or passport number, gender	Provided by you during registration and KYC verification
Contact Data	Mobile phone number, email address, residential address (division, district)	Provided by you during registration or account updates
Financial Data	bKash / Nagad / Rocket account number, transaction history, deposit and withdrawal amounts in BDT	Provided by you when making deposits or withdrawals; received from payment processors
Account Data	Username, encrypted password hash, account balance, bonus status, betting history, game history	Generated automatically as you use the Platform
Technical Data	IP address, device type, browser type and version, operating system, time zone (BST, UTC+6), session duration	Collected automatically via server logs and browser signals
Usage Data	Pages viewed, games played, markets browsed, click patterns, search queries within the Platform	Collected automatically via analytics tools
Communications Data	Records of emails, live chat transcripts, and support tickets sent to or from uupk	Created when you contact our support team
Verification Documents	Scanned copies or photographs of National ID, passport, utility bills, payment method screenshots	Provided by you during KYC document submission

3. How We Use Your Data

uupk uses the personal data we collect for specific, clearly defined purposes only. We do not use your data in ways that are incompatible with the purposes described below.

3.1 Account Management and Platform Access

We use your Identity Data and Contact Data to create and maintain your player account, verify your identity, authenticate your login sessions, and communicate with you about your account status. This is the foundational purpose for which data is collected and is necessary to provide the service at all.

3.2 Payment Processing

We use your Financial Data to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Visa, Mastercard, and other supported payment methods. We share the minimum necessary financial data with payment processors to complete these transactions. All monetary amounts are processed in Bangladeshi Taka (BDT / ৳).

3.3 Identity Verification (KYC)

We use your Identity Data and Verification Documents to comply with Know Your Customer (KYC) requirements and to prevent underage gambling, fraud, and money laundering. Verification is required before your first withdrawal and may be requested at any time during your use of the Platform.

3.4 Responsible Gaming

We use your Account Data and Usage Data to monitor your gambling behaviour and identify patterns that may indicate problem gambling. This data is used to power self-exclusion tools, deposit limit enforcement, session time reminders, and cooling-off period management — all of which are available to you through the Responsible Gaming page.

3.5 Security and Fraud Prevention

We use your Technical Data and Account Data to detect and prevent fraud, money laundering, multi-account abuse, automated bot activity, and other prohibited conduct described in the Terms & Conditions. This includes monitoring login locations, device fingerprints, and unusual transaction patterns.

3.6 Customer Support

We use your Communications Data, Account Data, and Contact Data to respond to your support queries, resolve disputes, and improve the quality of our customer service. All support interactions are logged and retained in accordance with the data retention schedule described in Section 7.

3.7 Platform Improvement and Analytics

We use aggregated and anonymised Usage Data and Technical Data to understand how players interact with the Platform, identify pages or features that need improvement, optimise game loading performance, and make informed decisions about which new features or game titles to introduce. Anonymised analytics data cannot be traced back to any individual player.

3.8 Marketing Communications

Where you have given explicit consent, we may use your Contact Data to send you promotional communications about bonuses, seasonal offers (such as Eid, Pohela Boishakh, BPL, and IPL promotions), and new features available on uupk. You may opt out of marketing communications at any time by contacting [email protected] with the subject line "Unsubscribe". Opting out of marketing will not affect your ability to use the Platform or receive transactional communications about your account.

4. Legal Basis for Processing

uupk processes your personal data under the following legal bases, as applicable to each processing activity:

• Contractual necessity: Processing required to perform the contract between you and uupk — including account creation, payment processing, and service delivery.
• Legitimate interests: Processing carried out for purposes that serve the legitimate interests of uupk and our player community, including fraud prevention, security monitoring, platform improvement, and responsible gaming enforcement, provided these interests are not overridden by your fundamental rights.
• Legal obligation: Processing required to comply with applicable legal requirements, including anti-money-laundering obligations and responses to lawful requests from competent authorities.
• Consent: Processing based on your freely given, informed, and specific consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Disclosure

uupk does not sell, rent, or trade your personal information with third-party marketers, data brokers, or advertising networks. We share your data only in the following limited and specific circumstances:

5.1 Payment Service Providers

To process your financial transactions, uupk shares necessary payment information with licensed payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card networks (Visa, Mastercard). These providers are contractually obligated to process your data solely for the purpose of completing the transaction and are prohibited from using it for any other purpose.

5.2 Game Software Providers

uupk's casino and sportsbook services are powered by internationally certified game providers including Pragmatic Play, NetEnt, Microgaming, Evolution Gaming, Ezugi, and Spribe. These providers may receive technical session data (such as a randomised player session token) to deliver their games. No directly identifiable personal information such as your name or mobile number is shared with game providers without your consent.

5.3 Identity Verification Services

To carry out KYC checks, uupk may use trusted third-party identity verification services. These providers process your identity documents on our behalf and are bound by strict confidentiality and data security obligations. Verification results are returned to uupk; your full document data is not retained by the verification provider beyond the immediate verification process.

5.4 Legal and Regulatory Authorities

uupk will disclose personal data to competent legal, regulatory, or law enforcement authorities where required to do so by law, court order, or where we have a good-faith belief that such disclosure is necessary to prevent fraud, money laundering, or harm to any person. We will notify you of such disclosures where legally permitted to do so.

5.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of uupk's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer and of any changes to this Privacy Policy that result from it.

6. Cookies & Tracking Technologies

uupk uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, maintain your login session, and analyse usage patterns. The types of cookies we use are described below.

Cookie Type	Purpose	Duration
Essential Cookies	Required for the Platform to function — maintains your login session, remembers your language preference, and enables security features. Cannot be disabled.	Session / up to 30 days
Analytics Cookies	Collects anonymised data about how players navigate the Platform, which pages are most visited, and where errors occur. Used to improve Platform performance.	Up to 12 months
Functional Cookies	Remembers your preferences such as preferred game categories, display settings, and notification choices to personalise your experience.	Up to 6 months
Security Cookies	Supports fraud detection by recognising trusted devices and flagging unusual login patterns.	Up to 90 days

You can manage or delete cookies through your browser settings at any time. Please be aware that disabling essential cookies will impair your ability to use the Platform, as login sessions and security functions depend on them.

7. Data Retention

uupk retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The general retention schedule is as follows:

• Account data (active accounts): Retained for the full duration of the account's active status plus a minimum of 5 years following account closure, to comply with anti-money-laundering record-keeping obligations.
• KYC / identity verification documents: Retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Customer support communications: Retained for 3 years from the date of the most recent communication in each support ticket thread.
• Marketing consent records: Retained for 3 years from the date consent was given or from the most recent marketing interaction, to evidence consent in the event of a dispute.
• Technical / server logs: Retained for up to 12 months in active storage, then archived or deleted.
• Anonymised analytics data: May be retained indefinitely as it cannot be linked to any individual player.

When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised. Where deletion is temporarily delayed due to a legal hold, backup processes, or ongoing dispute resolution, the data will be isolated from active processing until it can be permanently removed.

8. Data Security

uupk implements a multi-layered technical and organisational security framework to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption on all data in transit between your browser and our servers.
• AES-256 encryption for sensitive data fields stored in our databases, including payment account references.
• Bcrypt password hashing — your password is never stored in plain text. Even uupk's own engineers cannot read your password.
• Role-based access controls (RBAC) that restrict internal access to personal data to only those employees whose job function genuinely requires it.
• Intrusion detection and prevention systems (IDS/IPS) monitoring for unusual access patterns at both the network and application layers.
• Regular independent security audits and penetration testing of the Platform infrastructure.
• Two-factor authentication (2FA) available for player accounts, strongly recommended for all users.
• PCI-DSS compliance for all cardholder data environments associated with Visa and Mastercard transactions.

Despite these measures, no system is entirely immune to security threats. In the event of a data breach that is likely to result in a risk to your rights or freedoms, uupk will notify affected players as promptly as practicable and take immediate remedial action.

9. Your Rights

You have the following rights in relation to the personal data uupk holds about you. All requests should be submitted to [email protected] with the subject line "Data Rights Request" and will be acknowledged within 48 hours and fulfilled within 10 business days.

• Right of access: You may request a copy of the personal data uupk holds about you, along with information about how it is being used.
• Right to rectification: You may request the correction of inaccurate or incomplete personal data. For basic account details (email, address), you may update these directly within your account settings.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to uupk's legal retention obligations (see Section 7).
• Right to restriction of processing: You may request that uupk restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being verified following a rectification request.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) so that it may be transferred to another service.
• Right to object: You may object to uupk processing your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, though uupk may be able to demonstrate compelling grounds that override your objection.
• Right to withdraw consent: Where uupk processes your data based on your consent (primarily marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

10. Children's Privacy and Age Verification

uupk is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 21. Age verification is a mandatory step in the registration process, and uupk reserves the right to request documentary proof of age at any point during a player's use of the Platform.

If uupk discovers or is notified that a person under the age of 21 has registered an account or submitted personal data, that account will be immediately suspended and all personal data associated with it will be deleted as promptly as technically possible, subject to any legal hold obligations. Any deposits made by an underage player will be handled in accordance with responsible gaming policy and applicable legal guidance.

If you are a parent or guardian and believe that a minor in your care has registered with uupk, please contact us immediately at [email protected]. We will investigate and act without delay.

11. Third-Party Services and Links

The uupk Platform may display content or references to third-party game providers (Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, Microgaming, etc.) and payment partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard). These entities operate under their own privacy policies, which are separate from this document and not controlled by uupk.

When you interact with a live dealer game powered by Evolution Gaming or Ezugi, for example, the video stream and in-game data is processed by that provider's own infrastructure. uupk is not responsible for the data practices of third-party game providers or payment processors beyond the contractual obligations we impose on them regarding the handling of any uupk player data they receive.

We recommend that you review the privacy policies of any third-party provider whose services you interact with through the Platform. uupk accepts no liability for the data practices of these independent parties beyond our own contractual relationship with them.

12. International Data Transfers

uupk serves players across Bangladesh and processes data using infrastructure that may be hosted in data centres outside Bangladesh. Where personal data is transferred internationally, uupk ensures that appropriate safeguards are in place to protect your data to a standard equivalent to this Privacy Policy.

Safeguards used for international transfers may include standard contractual clauses incorporated into our agreements with service providers, data processing agreements that impose obligations equivalent to those described in this Policy, and assessments of the legal frameworks in any recipient country that could affect the level of protection afforded to your data.

By using the uupk Platform from Bangladesh or any other location, you acknowledge that your data may be transferred to and processed in countries outside your own jurisdiction. uupk will always take reasonable steps to ensure such transfers are conducted securely and lawfully.

13. Amendments to This Privacy Policy

uupk reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date in the hero section of this page and, where the changes are significant, notify registered players by email or via an in-platform notification.

Your continued use of the uupk Platform after any changes to this Policy are published constitutes your acceptance of the revised terms. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data. If you have any concerns about a proposed or recent change to this Policy, please contact us at [email protected] before continuing to use the Platform.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way uupk handles your personal data, please reach out to our team using the contact details below. All data-related inquiries are treated as a priority and handled by a dedicated team member.

For all data rights requests (access, rectification, erasure, portability, objection), please email [email protected] with the subject line "Data Rights Request" and include your registered email address, your account username, and a brief description of your request. We will respond within 48 hours and fulfil your request within 10 business days.

For responsible gaming support including self-exclusion requests, deposit limit adjustments, and cooling-off periods, please visit the Responsible Gaming page. For general account and platform questions, visit the FAQ page.