Privacy Policy — uuok Platform

1 Who We Are and How to Contact Us

uuok is Bangladesh's premier online betting and casino platform, operating under the brand name uuok at https://uuok.bar. For the purposes of this Privacy Policy, uuok acts as the data controller in respect of personal data collected through the Platform. A data controller is the entity that determines the purposes and means of processing personal data.

If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, you may contact uuok's data protection team directly. All privacy-related correspondence should be directed to our support team at the following address:

2 Personal Data We Collect

uuok collects personal data through several channels: directly from you when you register an account or interact with the Platform, automatically when you use the Platform, and from third-party sources such as payment processors and identity verification providers. The categories of personal data we collect are set out below.

2.1 Data You Provide Directly

• Identity data: Full legal name, date of birth, gender, National Identity Card (NID) number, passport number or driver's licence number (as provided for KYC verification).
• Contact data: Mobile phone number, email address, residential address, city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal), and postcode.
• Account credentials: Username and encrypted password. uuok never stores passwords in plain text — all credentials are hashed using industry-standard cryptographic methods.
• Financial data: Mobile wallet account numbers (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), and card details (Visa, Mastercard) where applicable. Full card numbers are never stored on uuok servers; payment tokenisation is used for card-based transactions.
• KYC documents: Scanned copies or photographs of government-issued identity documents and proof of address submitted during the verification process.
• Communications data: The content of any correspondence you send to the uuok support team via email or live chat, including timestamps and associated account information.

2.2 Data Collected Automatically

• Technical data: IP address, device type, operating system, browser type and version, screen resolution , and mobile network operator.
• Usage data: Pages visited, time spent on each page, games played, bets placed, deposit and withdrawal history, session start and end times, and clickstream data.
• Location data: Approximate geographic location derived from IP address. uuok does not collect precise GPS-level location data from mobile devices.
• Cookie and tracking data: Information collected via cookies, web beacons, and similar technologies as described in Section 7 of this Policy.

2.3 Data Received from Third Parties

• Payment processors: Transaction reference numbers, transaction status, and payment method confirmation from bKash, Nagad, Rocket, Upay, and banking partners.
• Identity verification providers: Verification status and risk scores from third-party KYC and AML screening services.
• Game providers: Game session data, wagering history, and RNG-certified outcome records from certified studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi.
• Fraud prevention partners: Device fingerprinting scores, velocity check results, and fraud risk indicators from third-party fraud prevention tools integrated into the Platform.

3 How We Use Your Personal Data

uuok uses personal data collected through the Platform for the purposes described in the table below. Each processing activity is carried out on a defined lawful basis.

uuok will not use your personal data for any purpose other than those listed above without first obtaining your explicit consent or unless otherwise required by law.

4 How We Share Your Personal Data

uuok does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share personal data only with the categories of recipient described below, and only to the extent strictly necessary for the purpose stated.

4.1 Payment Processing Partners

To facilitate deposits and withdrawals in Bangladeshi Taka (৳), uuok shares the minimum necessary financial and identity data with integrated payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. These partners process data only in accordance with their own regulatory obligations and do not use your data for their own marketing purposes.

4.2 Identity Verification and AML Providers

uuok uses third-party KYC and anti-money laundering screening services to fulfil its legal obligations. These providers receive identity data and KYC documentation solely for the purpose of verification and risk screening. All third-party verification providers engaged by uuok are bound by data processing agreements and are prohibited from using your data for any other purpose.

4.3 Game Technology Providers

Game studio partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — receive session identifiers and wagering data necessary to operate their games within the uuok Platform. These providers do not receive your full identity profile or contact details; data shared is limited to what is technically required for game session management and audit trail purposes.

4.4 IT Infrastructure and Security Providers

uuok engages cloud hosting, content delivery, and cybersecurity service providers who may process personal data as part of Platform operations. All such providers operate as data processors under binding agreements and are required to implement security standards equivalent to or exceeding those applied by uuok.

4.5 Law Enforcement and Regulatory Authorities

uuok may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or where uuok reasonably believes such disclosure is necessary to prevent or report suspected illegal activity, including fraud, match-fixing, or money laundering. Where legally permissible, uuok will notify the affected Player of such disclosure.

5 Data Retention

uuok retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law or regulatory obligation. The retention periods applicable to the main categories of data collected by uuok are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

6 Data Security

uuok takes the security of your personal data seriously and applies a multi-layered security framework to protect data held on the Platform from unauthorised access, disclosure, alteration, or destruction.

6.1 Technical Security Measures

• SSL/TLS Encryption: All data transmitted between your browser or app and the uuok Platform is encrypted using SSL/TLS protocols. Look for the padlock icon in your browser address bar when accessing uuok.
• At-rest Encryption: Sensitive data stored in uuok databases — including identity documents, financial records, and KYC data — is encrypted at rest using AES-256 standard encryption.
• Password Hashing: Account passwords are never stored in plain text. Passwords are hashed using bcrypt with per-user salting before storage. uuok staff cannot retrieve your original password.
• Two-Factor Authentication (2FA): uuok supports SMS-based two-factor authentication for all accounts. Players are strongly encouraged to enable 2FA from within the account security settings.
• Firewalls and Intrusion Detection: The Platform is protected by enterprise-grade firewall configurations and real-time intrusion detection systems that monitor for anomalous access patterns.

6.2 Organisational Security Measures

• Access to personal data within uuok's internal systems is restricted to staff members who require it for legitimate operational purposes, on a strict need-to-know basis.
• All staff with access to personal data undergo mandatory data protection and security awareness training.
• Third-party providers who process data on behalf of uuok are vetted for security compliance before engagement and are bound by contractual data security obligations.
• uuok conducts periodic internal security reviews and vulnerability assessments to identify and remediate potential weaknesses in the Platform's security posture.

6.3 Data Breach Response

In the event that uuok becomes aware of a personal data breach that presents a risk to affected Players, uuok will take immediate steps to contain the breach, assess its scope, and notify affected individuals without undue delay. Notifications will be sent to the email address registered on your uuok account. uuok will also take all reasonable steps to prevent recurrence of the incident.

7 Cookies and Tracking Technologies

uuok uses cookies and similar tracking technologies to operate the Platform, improve user experience, and analyse usage patterns. A cookie is a small text file placed on your device when you visit the Platform. The types of cookies used by uuok are described below.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent the Platform from functioning correctly and may prevent you from logging in to your uuok account. Disabling functional or analytics cookies will not affect core Platform functionality but may reduce the quality of your experience.

8 Your Data Rights

As a user of the uuok Platform, you hold a number of rights in relation to your personal data. uuok is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights described below, please submit your request in writing to [email protected].

8.1 Right of Access

You have the right to request a copy of the personal data uuok holds about you. Upon receipt of a verified access request, uuok will provide you with a summary of your personal data in a readable format within fifteen (15) business days. There is no fee for a standard access request.

8.2 Right to Rectification

If any personal data uuok holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You may update basic contact information such as email address and phone number directly from within your account settings. Corrections to identity data (name, date of birth, NID number) require supporting documentation and must be submitted via the support team.

8.3 Right to Erasure

You may request that uuok delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other lawful basis applies. Please note that uuok is subject to legal obligations requiring retention of certain data categories (including KYC and financial records) for defined periods as described in Section 5. Erasure requests that conflict with these legal obligations cannot be fully honoured during the applicable retention period.

8.4 Right to Restriction of Processing

You have the right to request that uuok restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data, or where you have objected to processing and uuok is assessing the grounds for that objection. During any restriction period, uuok may store your data but will not actively process it for purposes beyond storage.

8.5 Right to Data Portability

Where processing is based on your consent or on a contract, and processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format. uuok will provide portable data exports in CSV or JSON format upon verified request. This right applies to data you have actively provided to uuok; it does not extend to inferred or derived data.

8.6 Right to Object

Where uuok processes your data on the basis of legitimate interests, you have the right to object to that processing. uuok will assess your objection and cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defence of legal claims.

8.7 Right to Withdraw Consent

Where uuok processes your data on the basis of your consent (for example, for personalised promotional communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal. You may withdraw marketing consent from within your account notification settings or by contacting [email protected].

9 Children and Minors

The uuok Platform is strictly intended for adults aged 21 years and above. uuok does not knowingly collect personal data from any individual under the age of 21. Age verification is conducted as a mandatory step in the account registration and KYC process. If uuok discovers that personal data has been collected from an individual under the age of 21, that account will be closed immediately, all balances will be handled in accordance with the applicable terms, and the associated personal data will be deleted from our systems as soon as legally permissible.

If you are a parent or guardian and believe that a minor in your care has registered an account on the uuok Platform without your knowledge, please contact [email protected] immediately so that we can investigate and take appropriate action.

10 International Data Transfers

uuok's primary data storage infrastructure is designed to keep Bangladesh Player data within the region wherever operationally feasible. However, some of the third-party service providers engaged by uuok — including certain game technology partners and security vendors — may process data on servers located outside Bangladesh. Where such international transfers occur, uuok ensures that appropriate safeguards are in place, including contractual data protection clauses that bind the recipient to data handling standards equivalent to those described in this Privacy Policy.

uuok will not transfer your personal data to any jurisdiction or entity that does not provide adequate data protection standards without your explicit consent or unless required by law.

11 Marketing Communications

With your consent, uuok may send you promotional communications about new games, seasonal bonuses, cricket betting promotions (BPL, IPL, T20 World Cup), and special offers tied to Bangladesh calendar events such as Eid, Pohela Boishakh, Victory Day (December 16), and Independence Day (March 26). These communications are sent via SMS to your registered mobile number or via email to your registered address.

You may opt out of marketing communications at any time by:

• Updating your notification preferences within the uuok account settings dashboard.
• Replying STOP to any SMS marketing message received from uuok.
• Contacting [email protected] with a clear request to unsubscribe from all marketing communications.

Opting out of marketing communications does not affect the delivery of transactional or operational communications such as deposit confirmations, withdrawal notifications, account security alerts, and identity verification requests. These communications are necessary for the operation of your account and cannot be opted out of while your account remains active.

12 Changes to This Privacy Policy

uuok reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or Platform features. When material changes are made, we will notify registered Players by email to the address on file, and we will update the "Last updated" date at the top of this document. The current version of this Privacy Policy will always be available at https://uuok.bar/privacy-policy.

We encourage you to review this Privacy Policy periodically. Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. If you disagree with any changes made to this Policy, you should discontinue use of the Platform and may request account closure by contacting [email protected].