iuck Privacy Policy — How We Protect Your Personal Data

Introduction

This Privacy Policy ("Policy") sets out how iuck ("we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your") who access or use the iuck online casino and sports betting platform, available at iuck.pro ("the Platform"). This Policy applies to all users of the Platform, including registered account holders, visitors who browse without registering, and any person who contacts our support team.

iuck is committed to handling your personal data responsibly and transparently. We recognise that the players who trust us with their personal information — including financial data and identity documents — deserve the highest standard of data protection. This Policy is designed to give you a clear and complete picture of our data practices so that you can make an informed decision about using the Platform.

By registering an account on iuck, completing our identity verification process, making a deposit, or simply browsing the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform and may request account closure as described in Section 14.

This Policy should be read in conjunction with the iuck Terms & Conditions, which govern your use of the Platform as a whole. In the event of any conflict between this Policy and the Terms & Conditions regarding data handling, this Policy shall prevail.

Data We Collect

iuck collects two broad categories of personal data: information you provide directly, and information we collect automatically through your use of the Platform. The specific categories of personal data we process are described below.

2.1 Information You Provide Directly

2.2 Information Collected Automatically

• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, games played, betting history, session duration, clickstream data, search queries made within the Platform.
• Location Data: Approximate geographic location derived from your IP address, used for regulatory compliance and fraud detection. We do not collect precise GPS-level location data.
• Cookie & Tracking Data: Data collected via cookies, web beacons, and similar technologies as described in Section 7.
• Transaction Logs: Automated records of all deposits, withdrawals, bets placed, bonuses applied, and balance changes on your account.

How We Collect Data

iuck collects personal data through the following channels and mechanisms:

• Direct Input: Information you enter into forms on the Platform, including registration forms, KYC document upload screens, deposit and withdrawal interfaces, and support contact forms.
• Automated Technologies: Our servers automatically log technical and usage data each time you interact with the Platform. Cookies and similar technologies capture session-level data as described in Section 7.
• Payment Processors: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, or Mastercard, our payment processing partners share transaction confirmation data with us. We do not receive or store full card numbers or mobile banking PINs — only transaction reference data and masked identifiers.
• KYC Verification Partners: Where we use third-party identity verification services to validate documents you submit, those providers may return verification results and risk scores to us. We do not share your raw document images with these providers beyond what is necessary for verification.
• Publicly Available Sources: In limited circumstances — primarily for fraud prevention or regulatory compliance — we may supplement your profile with data from publicly available sources such as sanctions lists or PEP (Politically Exposed Persons) databases.

Purpose of Processing

iuck processes your personal data for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your separate consent.

4.1 Account Management

We process your identity and contact data to create and maintain your player account, authenticate your logins, communicate account-related notifications (including security alerts, balance confirmations, and account status updates), and respond to support enquiries.

4.2 Identity Verification (KYC)

We are required to verify the identity and age of all players before processing withdrawals. Document data submitted through the KYC process is used solely for this purpose. We verify that you are at least 21 years old and that your account details match your identity documents.

4.3 Payment Processing

Financial data is processed to execute deposit and withdrawal transactions, detect and prevent payment fraud, reconcile transaction records, and comply with anti-money laundering (AML) obligations. We retain transaction records as required for audit and compliance purposes.

4.4 Platform Personalisation

Usage and preference data allows us to personalise your experience on the Platform — for example, remembering your preferred games, displaying relevant promotions, and presenting content that matches your betting preferences. You may opt out of personalisation-based processing by contacting [email protected].

4.5 Responsible Gaming

Responsible gaming data — including deposit limits, self-exclusion status, and session duration preferences — is processed to enforce the tools you activate and to identify accounts that may exhibit signs of problem gambling requiring intervention.

4.6 Fraud Prevention and Security

Technical data, usage data, and location data are analysed to detect suspicious activity, prevent account takeover, identify bot activity, and block access from sanctioned or prohibited jurisdictions.

4.7 Legal and Regulatory Compliance

iuck processes personal data as necessary to comply with applicable law, respond to lawful requests from regulatory authorities, and exercise or defend legal claims.

4.8 Marketing Communications

If you have opted in to receive marketing communications, we may use your contact data to send you information about promotions, new game releases, seasonal offers, and BPL cricket or IPL betting specials. You may withdraw marketing consent at any time by clicking the unsubscribe link in any marketing email or by contacting [email protected].

Legal Basis for Processing

iuck processes your personal data on the following legal bases, depending on the specific processing activity:

• Contract Performance: Processing that is necessary to provide the services you have requested under the Terms & Conditions — including account management, payment processing, and KYC verification — is carried out on the legal basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable anti-money laundering law, age verification requirements, and responses to lawful regulatory requests is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and analytics is carried out on the basis of iuck's legitimate interests in operating a secure and sustainable platform, provided those interests are not overridden by your rights.
• Consent: Processing for marketing communications and optional personalisation features is carried out on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

iuck does not sell your personal data to third-party marketing organisations under any circumstances. We share personal data only with the limited categories of recipients described below, and only to the extent strictly necessary for the purposes identified in Section 4.

6.1 Payment Processors

Transaction data is shared with our payment processing partners — including mobile wallet operators (bKash, Nagad, Rocket, Upay) and card scheme processors (Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank) — solely to execute the financial transactions you have requested. These processors are bound by their own data protection obligations and by contractual data processing agreements with iuck.

6.2 Identity Verification Providers

During KYC verification, document images and identity data may be shared with third-party identity verification service providers operating under strict confidentiality agreements. These providers return verification results to iuck and are not permitted to retain or use your documents for any other purpose.

6.3 Technology and Infrastructure Providers

iuck uses third-party cloud hosting, database, and analytics infrastructure providers who may process personal data on our behalf as data processors under binding contractual obligations. These providers do not have independent rights over your data.

6.4 Game Software Providers

Game studios and live casino operators (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) whose products are available on the Platform may receive limited technical data — such as your anonymised player session ID — to enable game functionality. These providers do not receive your full identity or financial data.

6.5 Regulatory and Law Enforcement Authorities

iuck will disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where we are legally compelled to do so, where disclosure is necessary to prevent or detect crime, or where we are required to do so to protect the rights, property, or safety of iuck, its players, or third parties.

6.6 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving iuck, personal data held by iuck may be transferred to a successor entity, subject to the same or equivalent data protection obligations as set out in this Policy. Players will be notified of any such transfer that materially affects the use of their personal data.

Cookies & Tracking Technologies

iuck uses cookies and similar tracking technologies to ensure the Platform functions correctly, to understand how players use the Platform, and to deliver a consistent experience across sessions and devices.

7.1 Types of Cookies We Use

7.2 Managing Cookies

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from logging in or completing transactions. Disabling analytical or marketing cookies will not affect your ability to use the Platform's core features. For detailed instructions on managing cookies in your specific browser, please refer to your browser's help documentation.

7.3 Web Beacons and Pixel Tags

In addition to cookies, iuck may use web beacons — small transparent image files embedded in pages or emails — to track whether email communications have been opened and to measure campaign effectiveness. If you have opted out of marketing communications, web beacons in marketing emails will not be triggered.

Data Retention

iuck retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account relationship with iuck plus a period of five (5) years following account closure, to meet AML record-keeping requirements.
• KYC Documents: Retained for five (5) years following the end of the account relationship, in accordance with applicable financial record-keeping standards.
• Transaction Records: Retained for five (5) years following the date of each transaction.
• Support Communications: Retained for three (3) years from the date of the communication, unless the communication relates to an unresolved dispute, in which case it is retained until the dispute is fully resolved plus one (1) year.
• Marketing Consent Records: Retained for the duration of your account plus three (3) years, to demonstrate consent and honour opt-out requests.
• Server Logs: Retained for up to twelve (12) months for security monitoring and fraud detection purposes.

Once the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual. Where data cannot be immediately deleted due to technical or legal constraints, it is isolated from active processing until deletion is possible.

Data Security

iuck employs a layered approach to information security, combining technical safeguards, organisational controls, and operational procedures to protect your personal data against unauthorised access, disclosure, alteration, or destruction.

9.1 Technical Security Measures

• Encryption in Transit: All data transmitted between your browser or device and our servers is protected using TLS 1.3 / 256-bit SSL encryption. The padlock icon in your browser's address bar confirms an active encrypted connection.
• Encryption at Rest: Sensitive data fields — including payment details, KYC documents, and identity data — are encrypted at rest in our database infrastructure using AES-256 encryption.
• Password Security: Passwords are stored as salted hashes using industry-standard one-way hashing algorithms. iuck staff cannot view your plaintext password and will never ask for it.
• Two-Factor Authentication (2FA): SMS-based 2FA is available on all iuck accounts and is strongly recommended. We may enforce 2FA for high-value withdrawals or when unusual login activity is detected.
• Access Controls: Access to production systems and personal data is restricted to authorised iuck personnel on a strictly need-to-know basis. Privileged access is logged and reviewed regularly.
• Intrusion Detection: Automated monitoring systems scan for unusual access patterns, injection attempts, and other threat indicators around the clock.

9.2 Organisational Security Measures

All iuck staff with access to personal data are subject to confidentiality obligations. Access rights are reviewed quarterly and revoked immediately upon role change or departure. Security awareness training is conducted on a regular basis. Third-party vendors with access to personal data are vetted for security practices before engagement and are bound by contractual data protection obligations.

9.3 Incident Response

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, iuck will notify affected players without undue delay and provide guidance on protective steps you can take. We maintain a documented incident response plan that is tested and updated regularly.

Your Data Rights

As a data subject, you hold the following rights with respect to your personal data held by iuck. These rights may be exercised at any time by submitting a written request to [email protected]. iuck will acknowledge your request within five (5) business days and respond in full within thirty (30) days, or notify you of any extension required for complex requests.

10.1 Right of Access

You have the right to request a copy of all personal data that iuck holds about you. We will provide this in a structured, readable format. Requests are fulfilled free of charge for the first copy; a reasonable administrative fee may apply for subsequent requests within a twelve-month period.

10.2 Right to Rectification

If any personal data iuck holds about you is inaccurate or incomplete, you have the right to request correction. Minor corrections (such as contact details) may be made via the account dashboard directly. Corrections to identity data require re-submission of KYC documents.

10.3 Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent and no other legal basis exists, or where processing is unlawful. Please note that we may be required by law to retain certain data (particularly transaction records and KYC documents) for a period of five years following account closure, which may limit the immediate exercise of this right.

10.4 Right to Restrict Processing

You may request that iuck restrict the processing of your data while a rectification or objection request is being resolved, or where processing is unlawful but you prefer restriction over erasure.

10.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive a copy of your data in a machine-readable format and to transmit that data to another controller.

10.6 Right to Object

You may object at any time to processing of your personal data for direct marketing purposes. You may also object to processing carried out on the basis of legitimate interests, in which case iuck will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.

10.7 Right to Withdraw Consent

Where processing is based on your consent (such as marketing communications or optional personalisation), you may withdraw that consent at any time by contacting [email protected] or using the opt-out mechanism in any marketing communication. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Children's Privacy

iuck operates an online gambling platform that is strictly intended for adults aged 21 years and over. We do not knowingly collect, process, or retain personal data from any individual under the age of 21. Age verification is a mandatory component of our KYC process, and any account where the player is found to be under 21 years of age will be closed immediately, with any deposits returned and all winnings voided.

If you believe that a person under the age of 21 has created an account on iuck or has provided us with their personal data, please notify us immediately at [email protected]. Upon receiving such a notification, we will promptly investigate and, where confirmed, delete all personal data relating to the underage individual.

Third-Party Links

The iuck Platform does not contain links to external third-party websites as a general matter of policy. However, certain game software providers whose titles appear on our Platform operate their own separate platforms and privacy practices. When you interact with a third-party game provider's embedded software, that provider may collect limited technical data independently in accordance with their own privacy policy.

iuck is not responsible for the data practices of third-party game software providers, payment processors, or any other external parties. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the iuck Platform.

Policy Updates

iuck reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. When material changes are made to this Policy, we will notify registered players via the email address held on their account at least seven (7) days before the changes take effect.

The effective date shown at the top of this Policy and in the hero banner above indicates the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Policy. If you disagree with the changes, you may request account closure as described in Section 14.

All previous versions of the Privacy Policy are available on request by contacting [email protected].

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way iuck handles your personal data, please contact our Data Protection team using the details below. All data-related requests and privacy enquiries are handled with priority and in strict confidence.

• Email: [email protected]
• Response Commitment: We acknowledge all privacy-related enquiries within two (2) business days and provide a substantive response within thirty (30) days (Bangladesh Standard Time, UTC+6).
• Subject Line Guidance: When emailing, please include "Privacy Request" in your subject line and provide your registered username to enable prompt account identification.
• Account Closure: To close your account and request deletion of eligible personal data, include "Account Closure Request" in your subject line.
• Data Access Requests: Include "Data Access Request" in your subject line. We may require identity verification before fulfilling the request to protect against fraudulent data disclosure.