iuck Privacy Policy
— Your Data, Protected

1.1 Account Registration Data

When you create an iuck account, we collect the following personal information that you provide directly:

1.2 Payment & Transaction Data

To process deposits and withdrawals, iuck collects and stores the following financial data:

• bKash, Nagad, Rocket, or Upay mobile wallet numbers used for transactions.
• Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank account details where applicable.
• Transaction reference numbers, timestamps, and amounts (in BDT).
• Deposit and withdrawal history associated with your account.

iuck does not store full card numbers, CVVs, or full bank account credentials. Payment card transactions (where supported) are processed via PCI-DSS compliant payment gateways. iuck only receives a tokenised reference and the last four digits of a card number for record-keeping purposes.

1.3 Identity Verification (KYC) Documents

Before processing your first withdrawal, iuck is required to verify your identity. You will be asked to submit copies of:

• Proof of Identity: National Identity Card (NID), valid passport, or government-issued photo ID.
• Proof of Address: Utility bill, bank statement, or official correspondence dated within the last three months.
• Proof of Payment Method: Confirmation that your bKash, Nagad, Rocket, or bank account is registered in your own name.

KYC documents are stored securely and used exclusively for identity verification and anti-money laundering (AML) compliance purposes. They are not used for any marketing or profiling activities.

1.4 Behavioural & Platform Usage Data

When you use the iuck platform, we automatically collect certain technical and behavioural data including:

• IP address and approximate geolocation (country and city level).
• Device type, operating system, browser type and version.
• Pages visited, time spent on pages, navigation paths within the iuck platform.
• Game session data: games launched, bet amounts, session durations, win/loss records.
• Login timestamps and session activity logs.
• Referral source (how you arrived at iuck.app — e.g., organic search, direct URL).

This data is used for platform security monitoring, responsible gaming analysis, fraud detection, and aggregate analytics to improve the iuck platform. It is not used to build advertising profiles for sale to third parties.

2.1 Lawful Bases for Processing

iuck processes your personal data under the following lawful bases:

2.2 Specific Uses

In practical terms, iuck uses your personal data to:

• Create, maintain, and secure your iuck account.
• Verify your identity and age before processing withdrawal requests.
• Process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and linked Bangladeshi bank accounts.
• Detect and prevent fraud, money laundering, collusion, bonus abuse, and other prohibited activities.
• Send you transactional notifications directly related to your account — such as deposit confirmations, withdrawal status updates, and KYC request notices.
• Send you marketing communications about iuck promotions, bonuses, and new game releases — only if you have opted in.
• Monitor your gaming activity for responsible gambling purposes and apply interventions (such as deposit limit suggestions or cooling-off period notices) where patterns indicate potential problem gambling behaviour.
• Comply with applicable laws, court orders, and lawful requests from regulatory or law enforcement authorities.
• Resolve disputes, investigate complaints, and enforce these Terms & Conditions.

2.3 Automated Decision-Making

iuck uses automated systems for certain decisions including fraud risk scoring, responsible gaming threshold alerts, and bonus eligibility checks. These systems analyse patterns in account activity to flag unusual behaviour for human review. Where an automated decision has a significant effect on your account — such as triggering a withdrawal hold or an account restriction — you have the right to request human review of that decision by contacting our support team at [email protected].

3.1 Service Partners

iuck shares limited personal data with the following categories of trusted service partners, strictly for the purpose of delivering the iuck service:

All service partners are contractually bound to use your data only for the specific purpose for which it was shared, to maintain appropriate security standards, and to delete or return data when the service relationship ends.

3.2 Legal & Regulatory Disclosures

iuck may disclose your personal data to law enforcement agencies, financial intelligence units, courts, or other government authorities where required by applicable law, court order, or lawful investigative request. In such circumstances, iuck will disclose only the minimum data necessary to satisfy the legal requirement and, where permitted by law, will notify you that a disclosure request has been received.

3.3 International Data Transfers

Some of iuck's service partners (including game providers and technical infrastructure providers) may process data outside of Bangladesh. Where personal data is transferred internationally, iuck ensures that appropriate data transfer safeguards are in place, including contractual data processing agreements that require the recipient to protect your data to the same standard as described in this Privacy Policy.

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites function efficiently, to remember your preferences, and to provide analytical data to website operators. iuck uses cookies and similar technologies (including local storage and session tokens) on the iuck.app platform.

4.2 Types of Cookies Used by iuck

4.3 Managing Your Cookie Preferences

You can manage or disable non-essential cookies through your browser's privacy settings. Most modern browsers (Chrome, Firefox, Safari, Edge, Samsung Internet) allow you to block or delete cookies on a per-site or global basis. Please note that disabling strictly necessary or security cookies will impair the functionality of the iuck platform and may prevent you from logging in or placing bets.

iuck does not use third-party advertising cookies or behavioural advertising tracking technologies. We do not participate in cross-site tracking networks or retargeting programmes.

5.1 Security Measures

iuck employs a layered security architecture to protect your personal data, including:

• TLS 1.3 encryption on all data transmitted to and from iuck.app.
• AES-256 encryption for sensitive data stored in iuck's databases.
• Bcrypt hashing for all stored account passwords — rendering them unreadable even in the event of a data breach.
• Two-factor authentication (2FA) available to all players and mandatory for withdrawal requests above a defined threshold.
• Role-based access controls limiting iuck staff access to personal data on a strict need-to-know basis.
• Regular penetration testing and security audits of the iuck platform by independent security professionals.
• 24/7 automated fraud and anomaly detection systems monitoring for unusual account activity.

5.2 Data Retention Periods

iuck retains your personal data for the minimum period necessary to fulfil the purposes described in this Privacy Policy and to comply with applicable legal and regulatory retention obligations. The following retention periods apply:

After the applicable retention period expires, your data will be securely deleted or irreversibly anonymised.

5.3 Data Breach Response

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, iuck will notify affected players via the email address registered to their account within 72 hours of becoming aware of the breach — to the extent that such notification is practicable. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures iuck is taking to address the breach.

6.1 Rights You Hold Over Your Data

As an iuck player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request" and your registered account email address. iuck will respond to verified requests within 30 calendar days.

6.2 Identity Verification for Rights Requests

To protect your data from unauthorised access requests, iuck requires you to verify your identity before processing any privacy rights request. You will be asked to confirm ownership of the registered email address and may be asked to confirm additional account details. iuck will not process rights requests received from unverified sources.

7.1 Opt-In Marketing

iuck will only send you promotional communications — including bonus offers, new game announcements, BPL cricket season promotions, Eid special offers, and Pohela Boishakh celebrations — if you have explicitly opted in to receive marketing communications during account registration or via your account settings. Marketing messages may be sent via email, SMS, or WhatsApp to the contact details registered on your iuck account.

7.2 Withdrawing Marketing Consent

You can withdraw your consent to marketing communications at any time by:

• Clicking the "Unsubscribe" link included at the bottom of every iuck marketing email.
• Updating your communication preferences in your iuck account settings.
• Contacting our support team at [email protected] and requesting removal from all marketing lists.

Withdrawal of marketing consent will be processed within 5 business days. Withdrawing consent will not affect the delivery of transactional notifications that are necessary for the operation of your account (such as deposit confirmations and withdrawal updates), which are sent regardless of marketing preferences.

7.3 Personalisation

Where you have opted in to marketing communications, iuck may personalise the content of those communications based on your platform activity — such as featuring promotions for games you have previously played or sports betting offers related to cricket events during the BPL or ICC T20 World Cup season. This personalisation uses only data held within your iuck account and does not involve any third-party data sourcing or cross-platform tracking.

8.1 Changes to This Privacy Policy

iuck reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this policy, we will notify registered players via the email address associated with their iuck account at least 14 days before the changes take effect. We will also update the "Last Updated" date at the top of this page. Continued use of the iuck platform after the effective date of any changes constitutes your acknowledgement of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how iuck is protecting your personal data. Archived versions of previous Privacy Policy documents are available on request by contacting our support team.

8.2 How to Contact iuck About Privacy

If you have any questions, concerns, or complaints about this Privacy Policy or about how iuck handles your personal data, please contact our Data Privacy team using the details below. We aim to respond to all privacy-related enquiries within 5 business days.

• Email: [email protected] — subject line: "Privacy Enquiry"
• WhatsApp: +880 1700 000000 (available 24/7, Bangladesh Standard Time, UTC+6)
• Support hours: 24 hours a day, 7 days a week

If you are not satisfied with iuck's response to your privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.

8.3 Governing Language

This Privacy Policy is written in English, which is the governing language for all legal interpretations of its content. In the event of any conflict or ambiguity arising from a translation of this document into any other language, the English version shall prevail.