uubdt Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") sets out how uubdt ("we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your") who visit, register on, or otherwise interact with the uubdt platform at https://uubdt.io (the "Platform"). It applies to all services offered through the Platform, including sports betting, casino games, live dealer games, card games, crash games, and customer support interactions.

We are committed to handling your personal data with care, transparency, and in accordance with internationally recognised data protection principles. We will never sell your personal data to third parties for marketing or commercial exploitation purposes. Your data is used solely to operate the Platform safely, verify your identity, process transactions, prevent fraud, and comply with applicable legal obligations.

Please read this Policy carefully before registering an account or depositing funds. By using the Platform, you confirm that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you should not use the Platform.

2. Data Controller Identity

The data controller responsible for your personal data collected through the uubdt Platform is the uubdt operating entity. For all data-related queries, requests, and formal correspondence, please use the following contact details:

• Platform Name: uubdt
• Website: https://uubdt.io
• Data Protection Contact Email: [email protected]
• Support Availability: 24 hours a day, 7 days a week via live chat and email
• Response Time for Formal Data Requests: 3–5 business days

When contacting us regarding a data protection matter, please include your registered account username and the nature of your request in the subject line of your email to allow us to process your request efficiently.

3. What Data We Collect

We collect personal data in the following categories, depending on how you interact with the Platform:

3.1 Registration and Account Data

• Full legal name (first name and surname)
• Date of birth (for age verification — minimum age 21)
• Gender (optional, for personalisation purposes only)
• Email address
• Mobile phone number (used for SMS OTP verification and WhatsApp support)
• Residential address including city, district, and postal code (Bangladesh)
• Chosen username and encrypted password (we never store your plaintext password)

3.2 Identity Verification (KYC) Data

• Scanned or photographed copy of your National Identity Card (NID), passport, or driving licence
• Proof of residential address (utility bill, bank statement, or official correspondence dated within 90 days)
• Selfie photograph or video for liveness verification (where required)
• Proof of payment method ownership (for example, a screenshot of your bKash or Nagad account showing your name and number)
• Source of funds declaration (for high-volume accounts subject to enhanced due diligence)

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction history including amounts, timestamps, and payment method references
• Payment method identifiers (for example, your bKash or Nagad mobile number, the last four digits of a Visa/Mastercard, or a bank account number suffix)
• Account balance history and bonus credit records
• Currency denomination (Bangladeshi Taka / BDT)

3.4 Betting and Gaming Activity Data

• Bets placed (sport, market, selection, stake amount, odds, settlement outcome)
• Casino game sessions (game title, provider, session duration, wager amounts, outcomes)
• Bonus usage and wagering progress
• Responsible gaming settings you have applied (deposit limits, session reminders, self-exclusion status)

3.5 Technical and Device Data

• IP address at the time of registration, login, and each transaction
• Device type, operating system, and browser type and version
• Screen resolution and language settings
• Geolocation data derived from your IP address (country and city level only — not GPS-level)
• Session start and end timestamps
• Referral URL (the page you visited before arriving at uubdt, if any)

3.6 Communications Data

• Contents of live chat conversations between you and uubdt support agents
• Email correspondence sent to and received from [email protected]
• Records of any bonus claim requests, complaints, or formal disputes you have submitted

4. How We Collect Your Data

We collect personal data through the following means:

• Directly from you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact support, or fill in any form on the Platform.
• Automatically — through server logs, session tracking, and cookies when you browse the Platform. See Section 8 (Cookies and Tracking) for full details.
• From third-party payment providers — bKash, Nagad, Rocket, Upay, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard may share transaction confirmation data with us as part of payment processing.
• From identity verification service providers — where we use automated KYC verification tools, those providers may return structured identity-match results to uubdt.
• From fraud detection services — our anti-fraud systems may cross-reference data points (device fingerprint, IP, velocity of deposits) with shared fraud-intelligence databases to identify suspicious patterns.

5. Legal Basis for Processing

We process your personal data under the following legal bases, each applicable to specific processing activities:

Where we rely on your consent as the legal basis (for example, for sending you personalised promotional offers), you have the right to withdraw that consent at any time by adjusting your communication preferences in your account settings or by contacting [email protected]. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

6. How We Use Your Data

uubdt uses the personal data it collects for the following specific purposes:

• Account creation and operation: To create and maintain your player account, verify your identity and age (21+ requirement), and ensure you can log in securely across devices.
• Transaction processing: To process your deposits and withdrawals accurately and in a timely manner through your chosen payment method (bKash, Nagad, Rocket, etc.), and to maintain a complete audit trail of your financial activity on the Platform.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent account activity, multi-accounting, bonus abuse, money laundering, and other forms of Platform misuse that could harm uubdt or its honest players.
• Regulatory compliance: To comply with anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and any other legal reporting obligations applicable to operating an online gaming platform serving Bangladeshi players.
• Customer support: To respond to your queries, investigate complaints, process responsible gaming requests (deposit limits, self-exclusion), and resolve any disputes regarding bets, bonuses, or account activity.
• Responsible gaming: To monitor your gaming activity for signs of problem gambling, enforce self-imposed limits you have set, and proactively reach out if our systems detect patterns of behaviour associated with gambling harm.
• Platform improvement: To analyse aggregated usage patterns (not individually identifiable) to improve the Platform's performance, user experience, game selection, and payment method reliability.
• Personalised promotions: Where you have consented, to send you targeted bonus offers, seasonal promotions (such as Eid or BPL season campaigns), and personalised game recommendations based on your activity history.
• Legal proceedings: To assert, exercise, or defend legal claims in the event of a dispute between you and uubdt.

7. Data Sharing and Disclosure

uubdt does not sell, rent, or trade your personal data to any third party for marketing purposes. We share your data only in the following limited and necessary circumstances:

7.1 Payment Service Providers

To process deposits and withdrawals, we share the minimum necessary data (your name, mobile number or account reference, and transaction amount) with our payment partners including bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and our Visa/Mastercard payment gateway. These providers are contractually obligated to process your data solely for payment purposes and to maintain appropriate security standards.

7.2 Identity Verification Providers

When you submit KYC documents, we may share your identity documents and related data with third-party identity verification service providers to automate and accelerate the verification process. These providers operate under strict data processing agreements and are not permitted to retain your documents beyond the verification period.

7.3 Game Content Providers

Third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — receive a session token and anonymised player identifier to launch game sessions within the Platform. These providers do not receive your full name, contact details, or payment information. Their handling of session data is governed by their own privacy policies.

7.4 Fraud Detection and Security Services

We may share device fingerprint data, IP addresses, and behavioural signals with third-party fraud detection services to identify and block fraudulent activity. These services process data only for the purpose of fraud risk assessment and are bound by confidentiality obligations.

7.5 Legal Authorities

We may disclose personal data to law enforcement authorities, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to prevent or detect a crime, protect the safety of individuals, or comply with a court order or other binding legal process. We will notify you of such disclosures where we are legally permitted to do so.

7.6 Business Transfers

In the event that uubdt undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the successor entity as part of that transaction. We will provide reasonable advance notice before your data is transferred and becomes subject to a different privacy policy.

8. Cookies and Tracking Technologies

uubdt uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and gather aggregate analytics data. The following categories of cookies are used:

You may manage or disable non-essential cookies through your browser settings at any time. Please be aware that disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from logging in or completing transactions.

9. Data Retention

uubdt retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, and in accordance with the following retention schedule:

• Active account data: Retained for the full duration of your account's active status plus a minimum of 5 years following account closure, in compliance with anti-money laundering record-keeping obligations.
• KYC documents: Retained for a minimum of 5 years following the date of submission or account closure, whichever is later.
• Transaction records: Retained for a minimum of 5 years following each transaction date.
• Customer support communications: Retained for a maximum of 3 years following the close of the relevant support ticket or dispute, unless the matter is subject to ongoing legal proceedings.
• Marketing consent records: Retained for the duration of your account plus 2 years, or until you withdraw consent, whichever is earlier.
• Analytics data: Retained in anonymised, aggregated form only — not linked to your individual account — for up to 36 months.
• Responsible gaming exclusion records: Retained for a minimum of 7 years following the end of an exclusion period to prevent re-registration during mandated exclusion windows.

When your data reaches the end of its applicable retention period and is no longer required for any legal or operational purpose, it is securely deleted or irreversibly anonymised. We conduct periodic data audits to ensure that retained data does not exceed these limits.

10. Data Security

uubdt takes the security of your personal data seriously and maintains a layered set of technical and organisational safeguards to protect your information against unauthorised access, loss, alteration, or disclosure:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and the uubdt Platform is encrypted using TLS 1.2 or higher. This is the same standard used by leading Bangladeshi banks and financial institutions.
• Encrypted Password Storage: Passwords are never stored in plaintext. We use industry-standard adaptive hashing algorithms (bcrypt) with salting to store password credentials securely.
• Two-Factor Authentication (2FA): SMS OTP verification is available and encouraged for all account holders. Any withdrawal request from a new device or IP address may trigger additional verification steps.
• Access Controls: Access to personal data held in our internal systems is restricted to authorised personnel only, on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security training.
• Penetration Testing and Vulnerability Management: Our Platform infrastructure undergoes periodic security assessments to identify and remediate potential vulnerabilities before they can be exploited.
• Intrusion Detection: Automated monitoring systems flag unusual activity patterns — such as rapid successive login attempts or abnormal withdrawal requests — for immediate investigation by our security team.

Despite these measures, no online platform can guarantee absolute security against all possible threats. If you suspect that your account has been accessed without your authorisation, please contact us immediately via live chat or at [email protected] so that we can take protective action on your behalf.

11. Your Rights

As a uubdt account holder whose personal data we process, you have the following rights with respect to your data:

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is being used. We will respond to verified access requests within 5 business days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may update basic account details (email address, phone number, residential address) directly via account settings, or contact support for changes that require manual review.
• Right to Erasure: You may request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent. Please note that we are unable to fulfil erasure requests where retention is required by law (for example, AML record-keeping obligations require us to retain certain data for at least 5 years after account closure).
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances, such as while we investigate a dispute or assess a rectification request.
• Right to Data Portability: You may request a structured, commonly used, machine-readable copy of personal data you provided to us directly (for example, your account registration data and betting history), to be transferred to you or to another controller of your choice.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests where you feel your individual circumstances override those interests.
• Right to Withdraw Consent: Where we process your data based on your consent (for example, for personalised promotions), you may withdraw that consent at any time via your account settings or by contacting [email protected]. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the rights listed above, please contact us at [email protected] with the subject line "Data Rights Request" and your registered account username. We will verify your identity before processing any data rights request to prevent unauthorised access to your records.

12. Changes to This Policy

uubdt reserves the right to update or amend this Privacy Policy at any time. Material changes — those that significantly affect how we collect or use your personal data — will be communicated to registered account holders via email and via a prominent notice on the Platform at least 7 days before the revised Policy takes effect. Minor clarifications and corrections may be published without advance notice.

The version number and effective date displayed at the top of this page will be updated whenever changes are made. We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any amended Policy constitutes your acceptance of the revised terms.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way uubdt handles your personal data, please contact our Data Protection team using the details below. We aim to respond to all privacy-related correspondence within 3–5 business days.

• Email: [email protected] (subject line: "Privacy Policy Query")
• Live Chat: Available 24/7 on the Platform — average response time under 2 minutes
• WhatsApp: +880 1700 000000 (support hours: 24/7)

For formal data rights requests (access, erasure, portability, rectification), please use email with the subject line "Data Rights Request" and include your registered account username and a description of your request. We will acknowledge receipt within 24 hours and process your request within 5 business days of identity verification.