quuok Privacy Policy

1.1 Information You Provide Directly

When you register a quuok account, place a bet, make a deposit or withdrawal, or contact our support team, you voluntarily provide us with certain personal information. The categories of data you provide directly include:

• Registration data: Full legal name, date of birth, gender, residential address (city and district within Bangladesh), mobile phone number, and a self-chosen account password.
• Identity verification (KYC) documents: Scanned or photographed copies of your National Identity Card (NID), passport, or Bangladesh driving licence, submitted to confirm your identity and age eligibility.
• Payment information: Mobile banking account numbers associated with bKash, Nagad, Rocket, or Upay; bank account details for Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, or Sonali Bank transfers; or card details for Visa and Mastercard transactions. Note that full card numbers are never stored on quuok servers — card transactions are processed and tokenised by our payment processor.
• Communications data: The content of any messages, emails, or live chat transcripts you send to the quuok support team, including any attachments or screenshots you choose to share.
• Self-exclusion and responsible gaming preferences: If you voluntarily set deposit limits, session time limits, or request self-exclusion, quuok records these preferences as part of your account profile to enforce them consistently.

1.2 Information We Collect Automatically

When you access the quuok platform — whether via a web browser on your mobile device or computer — we automatically collect certain technical and behavioural data. This data is collected to ensure the platform functions correctly, to detect fraud, and to improve the overall player experience. Automatically collected data includes:

• Device and browser data: Device type, operating system version, browser type and version, screen resolution, and device language settings.
• IP address and location data: Your IP address is collected at login and during active sessions. quuok uses IP data to verify that you are accessing the platform from Bangladesh and to identify potentially fraudulent access patterns. quuok does not collect precise GPS location data.
• Session and usage data: Pages visited, time spent on each page, betting and gaming activity (markets viewed, bets placed, games launched), search queries entered within the platform, and the sequence of actions taken during a session.
• Transaction logs: A complete log of all deposit and withdrawal transactions, including timestamps, amounts in BDT, payment method identifiers, and transaction status codes.
• Betting and gaming history: A full record of every bet placed and every casino game session initiated on your quuok account, including stakes, outcomes, and running account balances.

1.3 Information from Third Parties

quuok may receive limited personal data about you from trusted third-party sources in the following circumstances:

• Payment processors: Our payment partners (bKash, Nagad, Rocket, and Upay) confirm transaction outcomes and may share basic transaction metadata with quuok to reconcile deposit and withdrawal records.
• Identity verification services: Where quuok uses a third-party identity verification provider to assist with KYC checks, that provider may return a verification result (pass/fail) and basic extracted data from the submitted document.
• Fraud detection services: quuok's fraud detection partners may flag accounts based on behavioural patterns identified across multiple platforms. Where such a flag is raised, quuok may receive a risk score or alert from the third-party service.

2.1 Core Platform Operations

The primary purpose for which quuok collects and processes your personal data is to operate and deliver the services you have signed up for. This includes creating and maintaining your account, processing your deposits and withdrawals via bKash, Nagad, Rocket, and Upay, settling your bets and casino game outcomes correctly, and providing access to customer support when you need it.

Without the personal data described in Section 1, quuok would be unable to provide these core services. The legal basis for this processing is the performance of the contract between you and quuok — specifically, the Terms and Conditions you accepted at registration.

2.2 Identity Verification and Age Compliance

quuok processes your identity and age verification data to confirm that you meet the minimum age requirement of 18 years 18+ and that your account is registered in your own legal name. This processing is a legal obligation and also reflects quuok's commitment to responsible gaming. KYC documents are processed by quuok's compliance team and, where applicable, by trusted third-party identity verification services.

2.3 Fraud Prevention and Security

quuok uses automated and manual analysis of your account data — including login IP addresses, device fingerprints, transaction patterns, and betting behaviour — to detect and prevent fraud, money laundering, multi-accounting, and betting integrity violations. Where suspicious activity is detected, quuok may suspend your account pending investigation and, if required by applicable law, report the activity to the relevant authorities.

2.4 Responsible Gaming Monitoring

As part of quuok's commitment to player welfare, we analyse behavioural data — including deposit frequency, session length, and changes in betting patterns — to identify players who may be exhibiting signs of problem gambling. Where such indicators are detected, quuok may proactively reach out to offer responsible gaming tools, including deposit limits, session time limits, and self-exclusion. This processing is carried out in the legitimate interests of player protection.

2.5 Marketing Communications

With your explicit consent, quuok may send you marketing communications via SMS or email regarding promotions, bonus offers, new game releases, and seasonal events relevant to Bangladesh — including BPL cricket season, Eid, Pohela Boishakh, and other key dates. You may withdraw your consent to marketing communications at any time by contacting [email protected] or by using the opt-out link included in any marketing message. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

2.6 Platform Improvement and Analytics

quuok uses aggregated and anonymised usage data to analyse platform performance, identify technical issues, test new features, and optimise the overall player experience. Where data is fully anonymised — meaning it cannot be linked back to any individual player — it falls outside the scope of this Privacy Policy and may be retained and used for analytical purposes indefinitely.

2.7 Legal and Regulatory Compliance

quuok processes and retains certain categories of player data to fulfil its legal and regulatory obligations — including anti-money laundering (AML) record-keeping, responsible gaming audit trails, and response to lawful requests from competent authorities. This processing is carried out on the basis of legal obligation and takes precedence over any individual data rights request where the two conflict.

3.1 Our Policy on Data Sharing

quuok does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. Data is shared externally only in the limited circumstances described in this section, and only with parties who are contractually obligated to handle your data with appropriate security and confidentiality.

3.2 Payment Service Providers

To process your deposits and withdrawals, quuok shares the minimum necessary transaction data with your chosen payment provider — bKash, Nagad, Rocket, Upay, or the relevant bank. The data shared is limited to the transaction amount in BDT, your quuok account reference, and the payment method identifier you have registered. quuok does not transmit your full name, NID number, or KYC documents to payment providers unless specifically required by that provider's compliance process.

3.3 Identity Verification Partners

Where quuok engages a third-party identity verification service to assist with KYC processing, your submitted identity documents and associated personal data are transmitted to that service over an encrypted connection. The verification partner processes this data solely for the purpose of identity confirmation and is prohibited from using it for any other purpose. Verification results are returned to quuok and the original document data is not retained by the verification partner beyond the period required to complete the check.

3.4 Game Technology and Software Providers

quuok's casino and sportsbook platform is powered in part by third-party game studios and platform technology providers, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised or pseudonymised session data to ensure game integrity, resolve disputes, and maintain their own audit records. Your full name and payment details are not shared with game providers.

3.5 Fraud Detection and Security Partners

quuok works with specialist fraud detection and cybersecurity partners to protect the platform and its players. These partners may receive device fingerprint data, IP address information, and behavioural risk signals to generate fraud risk assessments. All data shared with fraud detection partners is subject to strict contractual confidentiality obligations.

3.6 Legal and Regulatory Disclosures

quuok may be required to disclose your personal data to law enforcement agencies, courts, or regulatory authorities where: (a) we are legally compelled to do so by a valid court order or statutory requirement; (b) disclosure is necessary to prevent or detect a serious crime; or (c) disclosure is required to protect the safety of a player or a third party. quuok will notify you of any such disclosure where permitted by law to do so.

3.7 Corporate Transactions

In the event that quuok undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring or successor entity as part of that transaction. quuok will notify registered players of any such change via their registered contact details prior to the transfer taking effect, and the acquiring entity will be required to uphold the commitments made in this Privacy Policy.

4.1 What Are Cookies?

Cookies are small text files that are placed on your device when you visit the quuok platform. They allow the platform to recognise your device, maintain your session state, and remember certain preferences between visits. In addition to cookies, quuok may use similar technologies such as local storage, session storage, and pixel tags for equivalent purposes.

4.2 Categories of Cookies Used by quuok

The following table describes the categories of cookies quuok uses and the purpose of each:

4.3 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, and delete cookies via the privacy or security section of the browser preferences menu. Please note that blocking strictly necessary or fraud detection cookies may prevent you from logging in to your quuok account or may cause unexpected behaviour during your session. quuok is not responsible for any loss of access or functionality resulting from cookies being blocked at the browser level.

4.4 No Third-Party Advertising Cookies

quuok does not use third-party advertising networks or ad-tech cookies. You will not be tracked across other websites by quuok cookies, and quuok does not build individual advertising profiles based on your browsing behaviour outside the quuok platform. Any cookies placed by quuok are strictly limited to the quuok domain.

5.1 Technical Security Measures

quuok implements a range of technical security controls to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and quuok's servers.
• Encryption at rest for sensitive data categories including KYC documents and payment identifiers stored on quuok's infrastructure.
• Role-based access controls that restrict employee access to personal data on a strict need-to-know basis.
• Automated intrusion detection and monitoring systems that flag and respond to anomalous access patterns in real time.
• Regular security vulnerability assessments and penetration testing of the quuok platform.
• Multi-factor authentication requirements for quuok staff accessing systems that hold personal player data.

5.2 Organisational Security Measures

In addition to technical controls, quuok maintains internal policies and procedures governing the handling of personal data. All quuok staff and contractors who handle player data are required to complete data protection training and are bound by confidentiality obligations as a condition of their engagement. Access to production systems containing personal data is logged and audited on a regular basis.

5.3 Your Responsibilities

While quuok takes its security obligations seriously, the security of your quuok account also depends on the steps you take to protect your own login credentials. You are responsible for keeping your password confidential, for logging out of your account when using a shared device, and for ensuring that your registered mobile number is secured with a PIN or biometric lock. quuok strongly recommends choosing a unique, strong password — at least 10 characters combining upper and lower case letters, numbers, and symbols — and not reusing your quuok password on any other platform.

5.4 Data Breach Response

In the unlikely event of a personal data breach that poses a risk to the rights and freedoms of affected players, quuok will notify impacted players via their registered contact details as promptly as is practicable. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps quuok has taken or intends to take to address the breach. quuok maintains an internal data breach response plan that is reviewed and updated on a periodic basis.

6.1 Retention Principles

quuok retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required to comply with applicable legal, regulatory, or contractual obligations. When data is no longer needed for its original purpose and no legal retention obligation applies, it is securely deleted or irreversibly anonymised.

6.2 Retention Periods by Data Category

6.3 Anonymised Data

Where quuok anonymises personal data — for example, for platform analytics or historical reporting — the anonymised dataset is no longer considered personal data and may be retained for an indefinite period. quuok takes care to ensure that anonymisation is irreversible and that re-identification is not reasonably possible from the retained dataset.

7.1 Right of Access

You have the right to request a copy of the personal data that quuok holds about you. This is sometimes called a Subject Access Request (SAR). To submit an access request, email [email protected] with the subject line "Data Access Request" and include your registered mobile number. quuok will respond within 30 calendar days of receiving a valid request. quuok may ask you to verify your identity before processing an access request to ensure that data is not disclosed to an unauthorised party.

7.2 Right to Correction

If you believe that any personal data quuok holds about you is inaccurate or incomplete, you have the right to request a correction. For basic account details — such as your registered email address or contact number — you may be able to update these directly within the quuok platform settings. For corrections to KYC-verified fields (such as your legal name or date of birth), you will need to contact [email protected] and provide updated verification documentation.

7.3 Right to Erasure

You may request that quuok deletes the personal data it holds about you. quuok will honour erasure requests where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you have withdrawn consent and there is no other legal basis for processing; or (c) the data has been unlawfully processed. Please note that quuok may be required to retain certain data categories despite an erasure request — particularly where retention is mandated by AML or regulatory obligations (see Section 6). In such cases, quuok will inform you of the specific data that cannot be deleted and the legal basis for its continued retention.

7.4 Right to Restrict Processing

In certain circumstances, you may ask quuok to restrict the processing of your personal data — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed. Where processing is restricted, quuok will continue to store the data but will not actively process it except with your consent or for the establishment, exercise, or defence of legal claims.

7.5 Right to Object to Marketing

You have an unconditional right to object to the processing of your personal data for direct marketing purposes. To exercise this right, email [email protected] with the subject "Marketing Opt-Out" and your registered mobile number. quuok will process your opt-out within four Bangladesh Standard Time business hours and will not send further marketing communications following confirmation of your opt-out.

7.6 How to Exercise Your Rights

All privacy rights requests should be submitted to [email protected]. Please include your full name as registered on your quuok account, your registered mobile number, and a clear description of the right you wish to exercise. quuok will verify your identity before acting on any request that could affect account data. quuok will respond to all valid requests within 30 calendar days. Where a request is particularly complex or voluminous, quuok may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

8.1 Changes to This Privacy Policy

quuok reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law or regulation, changes to quuok's data processing practices, the introduction of new platform features that involve new categories of data, or changes to the third-party service providers we work with.

When a material change is made to this Privacy Policy, quuok will notify registered players via their registered mobile number or email address at least 14 calendar days before the updated policy takes effect. For minor or non-material changes — such as clarifications of existing language or corrections of typographical errors — quuok may update the policy without prior notice, updating the effective date displayed in the hero section of this page.

Your continued use of the quuok platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the revised Privacy Policy, you should stop using the quuok platform and may request account closure by contacting our support team.

8.2 Policy Version History

quuok maintains a version history of this Privacy Policy. If you wish to review an earlier version, you may request it by emailing [email protected] with the subject "Privacy Policy Version Request". quuok will provide the requested version within 10 calendar days. The current version supersedes all prior versions from its effective date.

8.3 How to Contact quuok About Privacy

If you have any questions, concerns, or feedback about this Privacy Policy or about how quuok handles your personal data, please contact our support team using the details below. quuok is committed to responding to all privacy-related enquiries promptly and transparently.

8.4 Complaints

If you are dissatisfied with quuok's response to a privacy rights request or with how we have handled your personal data, you have the right to escalate your complaint. quuok encourages players to contact our support team in the first instance so that we can attempt to resolve the matter directly. If you remain dissatisfied after engaging with our support team, you may seek independent advice or raise the matter with an appropriate consumer protection or data protection authority in your jurisdiction.

quuok takes all privacy complaints seriously and commits to investigating each complaint thoroughly and responding with a full written explanation of our findings and any remedial action taken.

8.5 Governing Language

This Privacy Policy is drafted and published in English. English is the governing language of this document. In the event of any inconsistency between this English version and any translated or summarised version that quuok may produce for informational purposes, the English version shall prevail.