uu44 Privacy Policy

uu44 collects personal data in several categories depending on your interaction with the platform. The following table summarises the main categories of data we collect and examples of specific data points within each category.

uu44 does not collect special categories of sensitive personal data (such as racial or ethnic origin, religious beliefs, health data, or biometric data) except where explicitly required by law and with your express consent.

We collect personal data through the following methods:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or participating in promotions.
• Automated technologies: As you navigate the uu44 platform, we automatically collect Technical Data and Usage Data via cookies, server logs, and similar tracking technologies. See Section 7 (Cookies & Tracking) for full details.
• Third-party identity verification providers: Where we use a third-party KYC service to verify your identity, that provider may supply us with identity match scores and fraud risk signals derived from the documents and data you submitted.
• Payment processors: When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, or a banking partner, the payment provider may share transaction reference data and confirmation status with us to reconcile your account balance.
• Fraud prevention agencies: We may receive data from fraud detection services to verify that activity on your account is consistent with expected patterns and to prevent financial crime.

uu44 processes your personal data only where we have a legitimate legal basis to do so. The following table explains the purposes for which we process your data and the corresponding legal basis:

Where we rely on legitimate interest as a legal basis, we conduct a balancing test to ensure that our interests do not override your fundamental rights and freedoms. You may object to processing based on legitimate interest at any time by contacting us at the details provided in Section 12.

uu44 does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties only to the extent necessary for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to process your financial transactions.
• KYC and identity verification partners: Third-party services used to verify your age (21+) and identity as part of our mandatory onboarding process.
• Fraud prevention and AML services: Specialist agencies used to monitor for suspicious activity and ensure compliance with applicable financial crime prevention obligations.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other software licensors may receive anonymised usage data to optimise game performance and report RTP (return-to-player) compliance.
• Cloud and IT infrastructure providers: Hosting, database, and content-delivery providers who process data on our behalf under contractual data processing agreements that require them to protect your data to the same standard as uu44.
• Legal and regulatory authorities: Where required by applicable law, court order, or valid request from a government body, we may be obliged to disclose certain personal data. We will notify you of any such disclosure to the extent permitted by law.

All third parties who receive your personal data from uu44 are bound by confidentiality obligations and are prohibited from using your data for any purpose other than the one for which it was shared.

uu44 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years following account closure, in accordance with standard AML record-keeping obligations.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction, as required by applicable financial regulations.
• Support and communications records: Retained for 2 years from the date of the last communication, or longer if the communication relates to an ongoing dispute or formal complaint.
• Marketing preference data: Retained until you withdraw consent or close your account, whichever is earlier.
• Technical and usage logs: Typically retained for 12 months from collection, after which they are anonymised or deleted.

When personal data is no longer required, it is securely deleted or anonymised in a way that prevents re-identification.

uu44 has implemented a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• TLS/SSL encryption: All data transmitted between your browser or device and the uu44 platform is encrypted using Transport Layer Security (TLS) with a minimum of 256-bit encryption.
• AES-256 encryption at rest: Sensitive personal data and financial records stored on uu44 servers are encrypted at rest using AES-256 standard encryption.
• Access controls: Access to personal data within uu44 is restricted on a strict need-to-know basis. Staff who are authorised to access personal data are required to complete data protection training and are bound by confidentiality obligations.
• Two-factor authentication (2FA): Player accounts support 2FA for an additional layer of protection against unauthorised account access.
• Penetration testing and security audits: uu44 conducts regular security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data security incident that affects your personal data, uu44 will notify affected players and relevant authorities in accordance with applicable breach notification requirements, without undue delay.

Despite these measures, no system is completely immune to security risks. You are responsible for maintaining the confidentiality of your account credentials and for reporting any suspected unauthorised access to the uu44 support team immediately.

uu44 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device by our website when you visit. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the platform to function. These include session cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery (CSRF). These cannot be disabled without significantly impacting platform functionality.
• Performance and analytics cookies: Used to collect anonymised data about how players interact with the platform — such as which pages are visited most frequently and how long sessions last. This data helps us optimise the uu44 user experience.
• Functional cookies: Used to remember your preferences such as language settings, display preferences, and previously selected payment methods, so you do not need to re-enter them on each visit.
• Marketing and retargeting cookies: Used only where you have provided explicit consent. These cookies enable uu44 to deliver relevant promotional content based on your browsing behaviour and game preferences.

You may manage or withdraw your cookie consent at any time through your browser settings. Please note that disabling certain categories of cookies may affect the functionality or performance of the uu44 platform.

uu44 does not use third-party advertising networks that track your activity across unrelated external websites.

As a player whose personal data is processed by uu44, you hold the following rights in respect of that data. Requests to exercise any of these rights may be submitted to the contact details provided in Section 12.

• Right of access: You have the right to request a copy of the personal data we hold about you and information about how we process it. We will respond to verified access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data. We will comply with verified erasure requests within 30 days, subject to our obligation to retain certain data under applicable law (see Section 5).
• Right to restriction: You may request that we temporarily restrict processing of your personal data while a dispute regarding its accuracy or the lawfulness of our processing is resolved.
• Right to data portability: Where processing is based on your consent or on a contract, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on our legitimate interest at any time. You also have an unconditional right to object to processing of your personal data for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

uu44 will not charge a fee for responding to data subject requests unless a request is manifestly unfounded or excessive, in which case a reasonable fee may apply. We reserve the right to request proof of identity before processing any data subject request.

The uu44 platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that data and close the associated account.

If you believe that a minor may have accessed or registered on the uu44 platform, please contact our support team immediately at [email protected]. Account holders are responsible for ensuring that persons under 21 do not access their account.

21+ Only — uu44 enforces strict age verification

uu44 primarily stores and processes personal data within infrastructure serving the Bangladesh market. In certain circumstances, personal data may be transferred to or accessed from locations outside Bangladesh — for example, where we use cloud infrastructure providers or international fraud prevention services.

Where personal data is transferred internationally, uu44 ensures that adequate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy. These safeguards may include contractual clauses with service providers, or reliance on the data protection standards of the destination country where these are deemed adequate.

If you require further information about the specific safeguards applied to international transfers of your personal data, please contact us using the details in Section 12.

uu44 reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, applicable law, or the services we offer. Where changes are material — meaning they significantly affect your rights or our obligations — we will notify registered players by email and display a prominent notice on the uu44 platform before the changes take effect.

Minor changes (such as typographical corrections, clarifications, or formatting updates that do not affect substantive content) may be made without prior notice. The effective date displayed at the top of this page always reflects the date of the most recent update.

Continued use of the uu44 platform following notification of a material update to this Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should contact our support team to close your account before the revised Policy takes effect.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to make a complaint about how uu44 has handled your personal data, please contact us using the details below. All enquiries are handled in English and are responded to on Bangladesh Standard Time (BST, UTC+6).

• Email: [email protected] — please use the subject line "Privacy Request" or "Data Complaint" as appropriate.
• Live Chat: Available directly from the uu44 platform, 24 hours a day, 7 days a week. Target first response: under 15 minutes.
• Support Hours: 24/7 on BST (UTC+6)
• Response timeframe: uu44 aims to acknowledge all data-related enquiries within 24 hours and to provide a substantive response within 30 days of a verified request.

If you are not satisfied with our response to a data complaint, you may escalate the matter to the relevant data protection authority in your jurisdiction. uu44 will cooperate fully with any such regulatory inquiry.

This Privacy Policy applies to players aged 21 and above only