ursa88 Privacy Policy

ursa88 is an online casino and sports betting platform accessible at ursa88.app, designed and operated for players based in Bangladesh. The platform offers sports betting markets, live casino games, slot titles, and associated payment and account services — all denominated in Bangladeshi Taka (BDT).

For the purposes of this Privacy Policy, ursa88 is the data controller in respect of all personal data collected from registered players and visitors to the platform. We are responsible for determining the purposes and means by which your personal data is processed.

Our designated privacy contact can be reached at support@ursa88.app. All data-related enquiries, access requests, and complaints are handled by our compliance team, with an initial response target of 5 business days.

ursa88 collects personal data across several categories, depending on how you interact with the platform. The following table summarises the categories of data we may hold about you:

ursa88 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than document images required for KYC), or health data, unless specifically required by applicable compliance obligations.

ursa88 collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or opting into a promotional offer.
• Automated collection: Technical and usage data collected automatically when you access the platform, including IP address logging, session tracking, and device fingerprinting for fraud prevention purposes.
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Dutch-Bangla Bank (DBBL) in connection with deposit and withdrawal processing.
• Third-party verification services: Identity and age verification data returned by KYC service providers when processing your submitted documents.
• Cookies and similar technologies: Session cookies and analytical cookies placed on your device when you browse the ursa88 platform. See Section 7 for full cookie details.

ursa88 does not purchase personal data lists from third-party data brokers and does not collect data from social media platforms without your explicit consent.

ursa88 processes your personal data only for defined, legitimate purposes. The primary purposes for which your data is used are as follows:

• Account creation and management: To register your account, authenticate your identity at login, and maintain the accuracy of your player profile throughout your relationship with the platform.
• Age and identity verification: To confirm that you meet the minimum age requirement of 18 years and to comply with applicable Know Your Customer (KYC) obligations prior to processing withdrawals or granting access to certain platform features.
• Payment processing: To execute deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and DBBL, and to maintain accurate financial records of all transactions conducted through your account.
• Platform delivery and improvement: To operate the games, betting markets, and other services on the ursa88 platform, and to analyse usage patterns in order to improve the quality, reliability, and performance of those services.
• Fraud prevention and security: To detect and investigate suspicious account activity, unauthorised access attempts, bonus abuse, collusion, and other forms of fraudulent or prohibited conduct.
• Responsible gaming: To monitor player behaviour for indicators of problem gambling and to apply appropriate responsible gaming tools, including deposit limits, session reminders, and self-exclusion measures, in accordance with our Responsible Gaming Policy.
• Legal and regulatory compliance: To meet anti-money laundering (AML) obligations, respond to lawful requests from competent authorities, and maintain records required for compliance audit purposes.
• Marketing communications: To send promotional offers, bonus notifications, and platform news to players who have opted in to receive such communications. You may withdraw your consent at any time by contacting support@ursa88.app.
• Customer support: To respond to enquiries, investigate complaints, and resolve disputes in a timely and accurate manner.

ursa88 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the player account agreement, including account management, payment processing, and service delivery. Without this processing, we cannot provide the ursa88 platform to you.
• Legal obligation: Processing required for compliance with applicable laws and regulations, including age verification, anti-money laundering checks, and responses to lawful authority requests.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where those interests are not overridden by your privacy rights.
• Consent: Processing for optional purposes such as marketing communications and non-essential cookies, where you have provided explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

ursa88 does not sell your personal data. We share personal data with third parties only in the following limited circumstances:

• Payment processors: Financial data necessary to execute transactions is shared with payment providers including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Dutch-Bangla Bank (DBBL). Each provider processes data in accordance with their own privacy policies and applicable financial regulations.
• Identity verification providers: Identity documents and personal details submitted for KYC purposes may be shared with third-party verification service providers engaged by ursa88 to conduct age and identity checks. These providers are bound by confidentiality obligations and may not use your data for any other purpose.
• Game content providers: Game studios and platform providers (such as Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi) may receive anonymised session data necessary for game delivery and fair play certification. No personally identifiable player data is shared with game providers beyond what is strictly necessary for technical integration.
• Legal and regulatory authorities: ursa88 may disclose personal data to competent government authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or where necessary to protect the rights, property, or safety of ursa88 or its players.
• Professional advisers: ursa88 may share data with legal counsel, auditors, and compliance consultants on a strictly need-to-know basis and subject to professional confidentiality obligations.

All third parties with whom ursa88 shares personal data are required, by contract or applicable law, to implement appropriate technical and organisational security measures to protect that data.

ursa88 uses cookies and similar tracking technologies to operate the platform, maintain session continuity, prevent fraud, and analyse how the platform is used. The following categories of cookies are in use:

Most web browsers allow you to control cookie behaviour through their settings. Disabling strictly necessary cookies may prevent the ursa88 platform from functioning correctly. Disabling analytical or marketing cookies will not affect your ability to place bets or access your account.

ursa88 does not use third-party advertising networks or cross-site tracking cookies. Tracking on the platform is limited to first-party analytics for internal use only.

ursa88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your account relationship with ursa88, plus a minimum of 5 years following account closure, to meet financial record-keeping and AML compliance requirements.
• KYC verification documents: Retained for a minimum of 5 years from the date of submission or from account closure, whichever is later, in accordance with applicable anti-money laundering obligations.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, to support financial audit and compliance obligations.
• Customer support communications: Retained for 3 years from the date of the final message in each support interaction, for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for the duration of your consent and for 2 years following withdrawal of consent, to evidence the history of your marketing preferences.
• Technical and usage data (anonymised): Aggregated, anonymised analytics data may be retained indefinitely as it does not constitute personal data once anonymisation is complete.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is subject to an ongoing legal hold or dispute, data will be preserved only for the duration of that hold and deleted promptly upon its resolution.

ursa88 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. Key measures include:

• Transport encryption: All data transmitted between your device and the ursa88 platform is encrypted using 256-bit SSL/TLS technology.
• Password security: Player passwords are stored exclusively as salted cryptographic hashes using industry-standard algorithms. Plaintext passwords are never stored or transmitted.
• Access controls: Access to player personal data within ursa88's internal systems is restricted on a strict need-to-know basis. Staff access to sensitive data is logged and audited.
• Fraud detection: Automated systems monitor account activity in real time for indicators of unauthorised access, credential stuffing, bonus abuse, and financial fraud.
• Infrastructure security: Platform servers are hosted in access-controlled data centre environments with physical security, redundant power, and regular penetration testing.
• Incident response: ursa88 maintains a documented data breach response procedure. In the event of a security incident that poses a risk to player data, affected players will be notified promptly with details of the incident and the steps taken to address it.

While ursa88 takes reasonable and proportionate steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials and for notifying ursa88 immediately at support@ursa88.app if you suspect that your account has been compromised.

As a registered player on the ursa88 platform, you hold the following rights in respect of your personal data. These rights may be exercised at any time by contacting support@ursa88.app with your registered username and a description of your request:

To exercise any of the above rights, please email support@ursa88.app from your registered email address, including your username and the specific right you wish to exercise. ursa88 will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. We may need to verify your identity before processing certain requests.

The ursa88 platform is strictly for adults aged 18 and above. ursa88 does not knowingly collect personal data from individuals under the age of 18. Account registration requires confirmation that the applicant is at least 18 years old, and ursa88 may request documentary evidence of age at any point in the account lifecycle.

If ursa88 discovers or is notified that an account has been registered by, or is being used by, a person under the age of 18, the account will be immediately suspended, all pending transactions will be reversed, any winnings will be voided, and all personal data associated with the account will be deleted as promptly as practicable, subject to any legal retention obligations.

Parents and guardians who believe that a minor may have registered on the ursa88 platform are encouraged to contact us immediately at support@ursa88.app. ursa88 will treat all such reports with the highest priority and complete confidentiality.

ursa88 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform functionality. The effective date at the top of this page will be updated whenever a new version is published.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — ursa88 will notify registered players via the email address associated with their account at least 14 days before the changes take effect. Non-material changes, such as corrections of typographical errors or clarifications of existing provisions, may take effect immediately upon publication.

Your continued use of the ursa88 platform following the effective date of any revision constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, you must cease using the platform and may request account closure by contacting support@ursa88.app.

We recommend reviewing this page periodically to stay informed of how ursa88 protects and manages your personal data. Previous versions of this policy are available upon request.

If you have any questions, concerns, or requests relating to this Privacy Policy or to ursa88's handling of your personal data, please contact our privacy team using the details below:

• Email: support@ursa88.app (plain text — not a clickable link)
• Subject Line: Please use "Privacy Request" or "Data Enquiry" as your email subject for faster routing to the correct team
• Support Hours: 24 hours a day, 7 days a week, including all Bangladesh public holidays
• Time Zone: Bangladesh Standard Time (BST, UTC+6)
• Response Target: Initial acknowledgement within 5 business days; substantive response within 30 calendar days

When contacting us about a data request, please include your registered username, the email address associated with your account, and a clear description of your request. This will help our team process your enquiry as efficiently as possible.