sona01 Privacy Policy

This Privacy Policy ("Policy") describes how sona01 ("sona01", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at sona01.club, collects, uses, stores, and protects the personal data of players and visitors ("you", "your") who access or use our platform.

sona01 is committed to handling your personal information with care, transparency, and respect. We recognise that privacy is a fundamental right and we take our obligations as a data handler seriously. This Policy has been prepared in plain, accessible English so that every sona01 player — regardless of technical background — can fully understand how their data is managed.

This Policy applies to all data collected through the sona01 website at sona01.club, through our mobile-optimised platform, through communications with our customer support team, and through any other interaction you have with sona01. It applies to all players based in Bangladesh, including those located in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh.

For the purposes of this Privacy Policy, sona01 acts as the data controller in respect of the personal data of its registered players and platform visitors. As data controller, sona01 determines the purposes and means by which your personal data is processed.

If you have any questions, concerns, or requests relating to the processing of your personal data, you may contact the sona01 Data Protection contact point using the details provided in Section 14 of this Policy. sona01 aims to respond to all privacy-related enquiries within five business days.

sona01 collects personal data from you in the following categories and through the following means:

sona01 uses the personal data it collects for the following specific purposes. Each purpose is supported by a defined legal basis, as described in Section 5 of this Policy:

• Account Creation and Management: To register your sona01 account, verify your identity, maintain your player profile, and provide you with access to the full range of sona01 products and services.
• Identity Verification (KYC): To fulfil our obligations to verify the age and identity of all players (18+ requirement) and to conduct Know Your Customer checks as part of our anti-money laundering and fraud prevention procedures.
• Payment Processing: To process deposits and withdrawals through bKash, Nagad, Rocket, Upay, and any other payment methods offered on the platform. Financial data is shared with payment providers only to the extent necessary to execute transactions.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance. Support communications may be recorded and retained for quality assurance and training purposes.
• Responsible Gaming Compliance: To administer player protection tools including deposit limits, session alerts, cooling-off periods, and self-exclusion, and to monitor usage patterns that may indicate problem gambling behaviour.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct. Technical data and usage data are analysed for anomalous patterns.
• Platform Improvement: To analyse how players use the sona01 platform in order to improve game selection, navigation, performance, and overall user experience. This analysis is conducted on aggregated, anonymised data where possible.
• Legal Compliance: To meet our obligations under applicable law, including responding to lawful requests from competent authorities and maintaining records as required by law.
• Marketing Communications: To send you promotional offers, bonus notifications, and event announcements by email or push notification, where you have given explicit consent. You may withdraw your marketing consent at any time by contacting sona01 support.

sona01 processes your personal data only where a valid legal basis exists. The legal bases applicable to sona01's data processing activities are as follows:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you under the sona01 Terms & Conditions — including account administration, payment processing, and customer support.
• Legal Obligation: Processing required to comply with applicable legal requirements — including KYC verification, anti-money laundering compliance, and retention of financial records.
• Legitimate Interests: Processing necessary to pursue sona01's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and platform analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your explicit, informed consent — specifically for marketing communications and for the use of non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

sona01 does not sell your personal data to any third party. We share personal data only in the following limited and controlled circumstances:

• Payment Providers: bKash, Nagad, Rocket, Upay, and other integrated payment partners receive your wallet number and transaction details solely for the purpose of processing your deposits and withdrawals. These providers are bound by their own privacy policies and by the data sharing agreements in place with sona01.
• Game Providers: Third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive limited technical data (such as a pseudonymous player session identifier) to deliver their game content within the sona01 platform. No identity or financial data is shared with game providers.
• Identity Verification Services: Where sona01 uses a third-party KYC verification service to assist in the review of identity documents, that provider processes your identity data on our behalf under a data processing agreement and is not permitted to use your data for any purpose beyond verification.
• Platform Analytics and Security: Aggregated and anonymised usage data may be processed by trusted analytics and cybersecurity service providers to help sona01 improve the platform and protect against threats. These providers do not receive personally identifiable information.
• Legal and Regulatory Authorities: sona01 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by law, by court order, or where sona01 reasonably believes disclosure is necessary to protect the rights, property, or safety of sona01, its players, or the public.

sona01 uses cookies and similar technologies (including local storage and session tokens) on the sona01 platform. The following table summarises the types of cookies we use and their purposes:

sona01 does not use advertising cookies or cross-site tracking cookies that would allow third parties to build profiles of your behaviour outside of the sona01 platform. Strictly necessary cookies are deployed on the legal basis of contractual necessity; functional and analytics cookies are deployed on the basis of consent.

You may manage your cookie preferences at any time through your browser settings. Most modern browsers allow you to view, block, and delete cookies. Please note that disabling strictly necessary cookies will impair the functionality of the sona01 platform and may prevent you from logging into your account.

sona01 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, and in any event for no longer than required by applicable law. The following retention periods apply:

• Account and Identity Data: Retained for the duration of your active account, plus a minimum period of five years following account closure, to satisfy anti-money laundering record-keeping requirements.
• Financial Transaction Data: Retained for a minimum of five years from the date of each transaction, in accordance with financial record-keeping obligations.
• KYC Documents: Retained for a minimum of five years following account closure or the date of the last transaction, whichever is later.
• Customer Support Communications: Retained for a period of three years from the date of the last support interaction, to allow for the resolution of any subsequent disputes.
• Technical and Usage Data: Retained in identifiable form for a maximum of 24 months, after which it is anonymised or deleted.
• Marketing Consent Records: Retained until you withdraw your consent or close your account, plus one year thereafter for audit purposes.

When personal data is no longer required for its stated purpose and the applicable retention period has expired, sona01 securely deletes or anonymises the data in accordance with industry-standard data disposal procedures.

As a sona01 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact sona01 support using the details in Section 14. sona01 will respond to all valid requests within 30 days of receipt:

• Right of Access: You have the right to request confirmation of whether sona01 holds personal data about you, and to receive a copy of that data along with information about how it is processed.
• Right to Rectification: You have the right to request the correction of any inaccurate or incomplete personal data held about you. For account-held information such as your contact details, you may also update this directly through your account settings.
• Right to Erasure: You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected, or where you withdraw your consent and no other legal basis applies. Note that sona01 may be required to retain certain data for legal compliance purposes and erasure requests may be partially declined on this basis.
• Right to Restriction: You have the right to request that sona01 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its processing pending verification of sona01's legitimate grounds.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you have the right to receive a structured, machine-readable copy of your personal data for the purpose of transferring it to another service provider.
• Right to Object: You have the right to object to sona01's processing of your personal data where that processing is based on legitimate interests. You also have the unconditional right to object to the use of your personal data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

sona01 employs a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, unlawful destruction, and misuse. These measures include but are not limited to:

• Encryption in Transit: All data exchanged between your device and sona01's servers is encrypted using 256-bit SSL/TLS protocols. This applies to all platform pages, login sessions, payment flows, and API communications.
• Encryption at Rest: Sensitive personal data — including identity documents, financial records, and KYC data — stored on sona01's servers is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within sona01's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the categories of data required to perform their specific job functions. All staff with access to personal data are bound by confidentiality obligations.
• Intrusion Detection and Monitoring: sona01's infrastructure is protected by real-time intrusion detection systems, firewall controls, and continuous security monitoring. Anomalous activity triggers automated alerts and incident response procedures.
• Penetration Testing: sona01 engages independent security professionals to conduct regular penetration tests on the platform to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a personal data breach, sona01 has documented incident response procedures to contain, assess, and report the breach. Affected players will be notified without undue delay where the breach poses a high risk to their rights and freedoms.

While sona01 implements robust security measures, no digital system can guarantee absolute security. You are responsible for maintaining the confidentiality of your sona01 account credentials and for ensuring that your device is protected by appropriate security software. If you suspect unauthorised access to your account, please contact sona01 support immediately.

The sona01 platform is strictly intended for adults aged 18 years and above. sona01 does not knowingly collect, process, or retain personal data belonging to individuals under the age of 18. Age verification is a mandatory step in the sona01 account registration and KYC process.

If sona01 becomes aware that personal data has been collected from a person under the age of 18, that data will be immediately and securely deleted, the associated account will be permanently closed, and any deposited funds will be returned to the payment method used for the deposit following identity verification of the account holder.

Parents and guardians who believe that a minor in their care has registered or attempted to register a sona01 account are encouraged to contact sona01 support immediately via live chat or at the email address provided in Section 14. sona01 will investigate and act on all such reports as a matter of priority.

The sona01 platform may contain references to third-party game providers, payment services, and other external services. While sona01 exercises care in selecting its partners, we do not control the privacy practices of third-party websites or services that may be accessible from the sona01 platform.

This Privacy Policy applies solely to personal data collected and processed by sona01 on the sona01.club platform. sona01 accepts no responsibility or liability for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you access in connection with your use of sona01.

sona01 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made to this Policy, sona01 will notify registered players via the email address or mobile number associated with their account, and will update the "Last Updated" date at the top of this page.

The updated Policy will take effect on the date specified in the notification. Your continued use of the sona01 platform after the effective date of any revision constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must cease using the sona01 platform and may request account closure by contacting sona01 support.

sona01 recommends that you review this Privacy Policy periodically to stay informed about how we protect your personal data. All previous versions of this Policy are available on request by contacting sona01 support.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way sona01 handles your personal data, please contact us through any of the following channels. All contact details are provided as plain reference only.

• Email: [email protected]
• Live Chat: Available 24/7 directly on the sona01 platform (BST, UTC+6)
• WhatsApp: +880 1700 000000
• Response Target: sona01 aims to respond to all privacy-related enquiries within five business days. Urgent matters — including suspected unauthorised account access — are handled via live chat for fastest response.