uuko Privacy Policy — Your Data, Handled With Care

1 Who We Are

uuko operates the online betting and casino platform accessible at uuko.bio (the "Platform"). References in this Privacy Policy to "uuko", "we", "us", or "our" refer to the uuko Platform and its owners, operators, and affiliated service entities responsible for processing your personal data in connection with your use of the Platform.

uuko is committed to protecting the privacy and personal data of every individual who accesses, registers on, or otherwise interacts with the Platform. This Privacy Policy has been drafted in plain, formal English to ensure that users across Bangladesh can clearly understand how their data is handled.

For all privacy-related enquiries, your first point of contact is: [email protected]

2 Scope of This Policy

This Privacy Policy applies to all personal data collected by uuko through:

• The uuko website at uuko.bio and all sub-pages thereof.
• The account registration and login process.
• Deposit, withdrawal, and payment processing activities.
• Customer support interactions conducted via email or live chat.
• Automated data collection technologies such as cookies, log files, and analytics tools operating on the Platform.
• Identity verification (KYC) procedures carried out in relation to your Account.

This Policy does not apply to third-party websites, payment providers, or game studios that may be linked to or integrated with the Platform. Those parties operate under their own privacy policies, and uuko encourages you to review those policies independently before sharing personal data with any third party.

3 Data We Collect

uuko collects personal data in two principal ways: information you provide directly, and information collected automatically when you use the Platform. The categories of data we collect are described in the table below.

uuko does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless specifically required for regulatory compliance purposes and only with your explicit consent where applicable.

4 How We Use Your Data

uuko uses the personal data collected from you for the following specific and documented purposes:

• Account Management: To create, maintain, and administer your uuko Account, including authentication, security monitoring, and Account communications.
• Service Delivery: To provide you with access to betting markets, casino games, slots, live dealer games, and all other features of the Platform.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer, and to maintain accurate transaction records.
• Identity Verification (KYC): To verify your identity and age as required by uuko's anti-money-laundering obligations and responsible gaming commitments, including confirming that you are at least 21 years of age.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, collusion, and other prohibited conduct as defined in uuko's Terms & Conditions.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour, to enforce limits and self-exclusion requests, and to provide responsible gaming support where appropriate.
• Customer Support: To respond to your enquiries, complaints, and support requests in a timely and accurate manner.
• Legal Compliance: To meet uuko's obligations under applicable law, including responding to lawful requests from regulatory bodies or law enforcement agencies where required.
• Platform Improvement: To analyse usage patterns across the Platform (in aggregated or pseudonymised form where possible) and to improve features, performance, and user experience.
• Marketing Communications: To send you promotional offers, bonus notifications, and seasonal campaign updates (such as BPL, IPL, or Eid promotions) — but only where you have opted in to receive such communications. You may opt out at any time by contacting [email protected].

uuko does not use your personal data to make fully automated decisions that produce significant legal effects on you, without appropriate human review.

5 Legal Basis for Processing

uuko processes your personal data only where a valid legal basis exists. The principal legal bases on which uuko relies are as follows:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and uuko (i.e., your Account agreement and the Terms & Conditions), including providing the Platform's services, processing payments, and managing your Account.
• Legal Obligation: Processing is required to comply with applicable laws, including anti-money-laundering regulations, age verification obligations, and lawful requests from competent authorities.
• Legitimate Interests: Processing is necessary for uuko's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and general improvement of the Platform, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is based on your consent (for example, receiving marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Cookies and Tracking

uuko uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files stored on your browser or device when you visit the Platform. The types of cookies used by uuko include:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, load-balancing cookies, and security tokens. They cannot be disabled without affecting Platform functionality.
• Performance and Analytics Cookies: Used to collect aggregate data about how users interact with the Platform — such as pages visited, session duration, and error rates — to help uuko identify areas for improvement. Data collected by these cookies is pseudonymised where possible.
• Functional Cookies: Used to remember your preferences, such as language settings, and to personalise your Platform experience.
• Targeting and Preference Cookies: Used (only with your consent) to identify your interests and deliver more relevant promotional content within the Platform. These are not used to track you across third-party websites.

You can manage your cookie preferences through your browser settings. Blocking certain categories of cookies may affect your ability to use some features of the Platform. For more detailed information on the specific cookies in use, please contact [email protected].

7 Data Sharing and Disclosure

uuko does not sell, rent, or trade your personal data to third parties for their own marketing purposes. uuko may share your personal data with the following categories of recipients, strictly for the purposes described in this Privacy Policy:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and banking partners, for the purpose of processing deposits and withdrawals. These providers process your data under their own privacy policies and security standards.
• Identity Verification Partners: Third-party KYC and anti-fraud service providers who assist uuko in verifying user identities and detecting suspicious activity.
• Game Content Providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (such as session tokens or user IDs) necessary to operate their games within the Platform. They do not receive your full personal profile.
• Technology and Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity service providers who process data on uuko's behalf under strict data processing agreements.
• Legal and Regulatory Authorities: uuko will disclose personal data to law enforcement agencies, courts, or regulatory bodies when required to do so by applicable law, a valid court order, or legitimate regulatory request.
• Professional Advisers: Lawyers, accountants, and auditors who are bound by professional confidentiality obligations.

Any third party with whom uuko shares personal data is required to handle that data in a manner consistent with applicable data protection standards. uuko does not authorise third-party service providers to use your personal data for their own purposes beyond what is strictly necessary to perform the agreed service.

8 International Data Transfers

uuko's primary user base is located in Bangladesh. In some cases, personal data processed by uuko may be transferred to, stored on, or accessed from servers or service providers located outside of Bangladesh. Where such transfers occur, uuko takes steps to ensure that an adequate level of data protection is maintained, including:

• Transferring data only to service providers located in countries or regions that maintain data protection standards broadly equivalent to those applicable in Bangladesh.
• Entering into data processing agreements with all service providers that impose data security and confidentiality obligations consistent with this Privacy Policy.
• Applying additional technical safeguards, including end-to-end encryption, where international transfers involve sensitive personal data such as KYC documents or financial details.

By registering on the uuko Platform, you acknowledge and consent to the transfer of your personal data as described in this clause.

9 Data Retention

uuko retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The general retention principles applied by uuko are as follows:

• Active Account Data: Personal data associated with an active uuko Account is retained for the duration of your Account's active status and for a minimum period after Account closure, as required by anti-money-laundering and responsible gaming regulations.
• KYC Documents: Identity and address verification documents are retained for a minimum of five (5) years following the date of verification or the date of Account closure, whichever is later, in compliance with applicable anti-money-laundering obligations.
• Transaction Records: Financial transaction records, including bet history, deposit records, and withdrawal records, are retained for a minimum of five (5) years to support regulatory compliance and dispute resolution.
• Customer Support Records: Communications with the support team are retained for a minimum of two (2) years to support ongoing service quality and dispute resolution.
• Marketing Data: Where you have opted in to receive marketing communications, relevant preference data is retained until you withdraw consent or close your Account, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents its reconstruction or re-identification.

10 Your Rights as a Data Subject

You have a number of rights in relation to the personal data that uuko holds about you. These rights are described in detail in the Your Rights section below. To exercise any of these rights, please contact uuko at [email protected] with the subject line "Data Rights Request". uuko will respond within a reasonable timeframe, and in any event within thirty (30) days of receiving a valid request.

uuko reserves the right to request proof of identity before processing a data rights request, to ensure that personal data is not disclosed to or modified by an unauthorised party.

11 Security Measures

uuko implements a layered approach to data security, combining technical, organisational, and procedural measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures in place include:

• SSL/TLS Encryption: All data transmitted between your browser and the uuko Platform is encrypted using industry-standard SSL/TLS protocols, ensuring that your login credentials, payment details, and personal data cannot be intercepted in transit.
• Hashed Credential Storage: User passwords are never stored in plain text. They are hashed using a strong one-way cryptographic algorithm before storage, so that even in the unlikely event of a database breach, your raw password cannot be recovered.
• Two-Factor Authentication (2FA): uuko offers optional two-factor authentication for Account login, providing an additional layer of protection beyond your password. Users are strongly encouraged to enable 2FA.
• Access Controls: Access to personal data within uuko's systems is strictly limited to authorised personnel who require it to perform their legitimate job functions. All such access is logged and subject to periodic review.
• Intrusion Detection and Monitoring: uuko operates continuous network and application monitoring to detect and respond to anomalous activity, potential intrusion attempts, and data security incidents in real time.
• Incident Response: In the event of a data security incident that poses a risk to your personal data, uuko will notify affected users and relevant authorities in accordance with applicable legal obligations and within a reasonable timeframe.

While uuko employs robust security measures, no online system can be guaranteed to be entirely free from risk. You are encouraged to maintain strong, unique passwords for your uuko Account and to avoid sharing your login credentials with any third party.

12 Children and Minors

The uuko Platform is strictly for adults aged 21 and above. uuko does not knowingly collect, process, or retain personal data from any individual under the age of 21. If uuko becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated Account will be permanently closed.

If you believe that a minor has registered on the uuko Platform or that their personal data has been collected, please report this without delay to [email protected]. uuko takes underage access extremely seriously and will act promptly on any such report.

13 Changes to This Policy

uuko reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, Platform features, or data processing practices. When material changes are made, uuko will notify registered users via a prominent notice displayed on the Platform and, where reasonably practicable, by email to the address associated with your Account.

The effective date at the top of this page indicates when the current version of the Privacy Policy was last revised. Continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the revised Privacy Policy, you must cease using the Platform and request Account closure by contacting [email protected].

uuko recommends that you review this Privacy Policy periodically to stay informed about how your personal data is being handled.

14 Contact and Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or about the way uuko handles your personal data, please contact the uuko privacy team using the details below. uuko aims to acknowledge all privacy-related enquiries within 48 hours (Bangladesh Standard Time, UTC+6) and to resolve them within thirty (30) days.

• Privacy Enquiries Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Rights Requests: "Data Rights Request"
• Subject Line for Privacy Complaints: "Privacy Complaint"
• Response Language: English
• Support Hours: 24 hours a day, 7 days a week

uuko is committed to resolving all privacy complaints fairly and transparently through its internal complaints process. If you remain unsatisfied with uuko's response after exhausting the internal process, you may have the right to escalate your complaint to an applicable data protection authority or regulatory body under the laws of your jurisdiction.