ubbd Privacy Policy – How We Handle Your Data

Introduction

ubbd ("we", "us", "the Platform") is committed to protecting the personal data of all players who use the ubbd website at ubbd.pro. This Privacy Policy explains how we collect, process, store, and protect information relating to you when you register an account, make a deposit, place bets, contact our support team, or otherwise interact with the platform.

By using the ubbd platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent to the terms of this policy, you must not use the platform.

Categories of Personal Data We Collect

ubbd collects the following categories of personal data. We only collect data that is necessary for a specific, legitimate purpose as outlined in this policy.

How We Collect Your Data

We collect personal data through the following means. In each case, the collection is limited to what is reasonably necessary for the purpose stated.

• Directly from you: when you complete the registration form, update your account profile, submit a KYC document, contact support, or fill in any other form on the platform.
• Automatically during platform use: session data, device data, and activity logs are captured automatically as you browse and play. This data is collected via cookies and server-side logging.
• From payment providers: transaction confirmation data (amount, timestamp, partial account reference) is received from bKash, Nagad, Rocket, and Upay when you make a deposit or withdrawal.
• From fraud prevention and identity verification services: where required for KYC compliance or to assess account risk, we may receive confirmation signals from third-party identity verification providers. We do not receive raw data from these providers — only pass/fail outcomes.

How We Use Your Personal Data

ubbd uses personal data for specific, documented purposes only. We do not process personal data for any purpose that is incompatible with those listed below.

• Account creation and management: to register your account, authenticate your identity at login, and maintain your account in an active and accurate state throughout your use of the platform.
• Payment processing: to process your deposits and withdrawals, verify that payment instructions originate from the correct registered account, and maintain a financial transaction record for audit purposes.
• Age and identity verification (KYC): to confirm that you meet the minimum age requirement of 21 years and to verify your identity as required by our internal compliance procedures.
• Responsible gaming and fraud prevention: to detect unusual betting patterns, enforce account deposit limits or self-exclusion restrictions, and identify potential fraudulent activity or money laundering.
• Customer support: to respond to your queries, resolve complaints, and maintain a record of communications for quality assurance and dispute resolution purposes.
• Marketing communications (where consent has been given): to send you promotional offers, bonus notifications, and platform updates via SMS or messaging app. You may withdraw consent at any time by contacting [email protected].

Legal Basis for Processing

Each processing activity carried out by ubbd is supported by at least one of the following legal bases.

• Contractual necessity: processing is required to perform the contract between you and ubbd — specifically, to provide you with a functioning account and to process your financial transactions.
• Legal obligation: certain processing activities are required by applicable law, including anti-money laundering obligations, age verification requirements, and financial record-keeping duties.
• Legitimate interests: some processing activities — such as fraud detection, platform security monitoring, and improving our services — are carried out on the basis of ubbd's legitimate interests, provided those interests are not overridden by your rights.
• Consent: where ubbd sends you marketing communications or processes data for purposes beyond those strictly necessary for the contract, we rely on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing and Disclosure

ubbd does not sell, rent, or trade your personal data to third parties. We share personal data only in the following limited circumstances, and only to the extent necessary.

• Payment processors: partial transaction data is shared with bKash, Nagad, Rocket, and Upay solely for the purpose of processing your deposits and withdrawals. These providers process data under their own privacy policies and are not permitted to use your data for any other purpose.
• Game providers: your player ID and session data may be passed to our licensed game providers (such as Pragmatic Play, Evolution Gaming, Spribe) in order to load and run games. Providers are contractually prohibited from using this data for independent marketing purposes.
• Identity verification services: where KYC verification is required, your submitted documents may be processed by a contracted third-party identity verification provider. These providers operate under strict data processing agreements with ubbd.
• Legal and regulatory authorities: ubbd may be required by law, court order, or regulatory direction to disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities. We will notify you of any such disclosure where we are legally permitted to do so.

Cookies and Tracking Technologies

ubbd uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how the site is used. Three categories of cookies are used.

• Strictly necessary cookies: required for core platform functionality including session management, authentication, and security. These cookies cannot be disabled without breaking the platform.
• Functional cookies: used to remember your language preference, display settings, and previously entered information (such as your registered mobile number on the login screen). These improve your experience but are not essential.
• Analytics cookies: used to collect aggregate, anonymised data about how players use the platform — which pages are visited most, how long sessions last, and which features are used. This data is used only to improve the platform and is not linked to individual player identities.

You may manage or delete cookies through your mobile browser settings. Please note that disabling non-essential cookies will not prevent you from using the platform, but some features may behave differently. ubbd does not use cookies to track your activity on other websites.

Data Retention

ubbd retains personal data for as long as your account is active and for a period of 5 years following account closure. This retention period is necessary to meet financial record-keeping obligations, to resolve disputes, and to comply with legal requirements applicable to online gambling operators.

KYC documents are retained for a minimum of 5 years from the date of submission. Communications with our support team are retained for 3 years. Analytics and aggregated platform usage data is retained indefinitely in anonymised form. When retention periods expire, personal data is securely deleted or permanently anonymised using industry-standard data destruction methods.

Data Security

ubbd applies a range of technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. Key security measures in place include the following.

• 256-bit SSL/TLS encryption on all data transmitted between your device and our servers, ensuring that login credentials, payment details, and session data cannot be intercepted in transit.
• Encrypted storage of passwords and sensitive account fields. ubbd never stores passwords in plain text. Passwords are hashed using a modern one-way hashing algorithm with per-account salting.
• OTP-based multi-factor authentication on login and during sensitive account actions such as password changes and withdrawal requests. OTPs are delivered via SMS and expire after a short window.
• Access controls: personal data is accessible only to ubbd staff and contractors who have a genuine need to access it for a specific job function. All staff with data access are trained in data handling best practices and are bound by confidentiality obligations.

Despite these measures, no system is completely immune from security incidents. In the unlikely event of a data breach that poses a material risk to your rights, ubbd will notify affected players without undue delay and will take immediate remedial action.

Your Data Rights

As a user of the ubbd platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with your registered mobile number and a description of your request.

• Right of access: you may request a copy of all personal data ubbd holds about you. We will provide this in a structured, readable format within 30 days of the request.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to erasure: you may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other legal basis for processing. Note that erasure requests may be refused where retention is required by law.
• Right to restriction: you may request that ubbd restricts the processing of your data while a complaint or accuracy dispute is being resolved, rather than deleting it outright.
• Right to object: you have the right to object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes. ubbd will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal date.

ubbd will respond to all data rights requests within 30 days. Where a request is complex or numerous, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason within the initial 30-day window.

Children's Privacy

The ubbd platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If you believe that a person under 21 has registered an account or submitted personal data to ubbd, please notify us immediately at [email protected]. We will investigate the matter promptly and delete any data found to belong to an underage individual.

Marketing Communications

ubbd may send you promotional messages, bonus alerts, and platform news via SMS or messaging apps if you have consented to receive marketing communications during registration or subsequently through your account settings. These messages will always identify ubbd as the sender and will always include clear instructions on how to unsubscribe.

To unsubscribe from marketing communications at any time, contact [email protected] or update your communication preferences in your account settings. Opting out of marketing will not affect your ability to receive transactional messages (such as deposit confirmations, withdrawal notifications, or security alerts), which are sent on the basis of contractual necessity rather than consent.

Changes to This Privacy Policy

ubbd reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or the services we offer. Where a material change is made, we will notify registered account holders via SMS or in-platform notification at least 7 days before the change takes effect.

The current version of this Privacy Policy is always available at ubbd.pro/privacy-policy. Your continued use of the platform after any update takes effect constitutes your acceptance of the revised policy. If you do not accept the revised policy, you should discontinue use of the platform and may request account closure.

Contact Us and Data Requests

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a potential data security incident, please contact the ubbd data team using the details below. Support is available 24/7 in English and Bangla.

Please include your registered mobile number and a clear description of your request or concern. We will acknowledge your message within 24 hours and aim to provide a full response within 30 days.