Privacy Policy — sona1011

When you register, verify, deposit, wager, or interact with the sona1011 platform in any way, we may collect and process a range of personal data. The categories of information we collect, and the circumstances under which we collect them, are set out in detail below.

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, trade union membership, genetic data, or health information except where a player's health condition is voluntarily disclosed in the context of a responsible gaming request (for example, a self-exclusion request citing a gambling addiction). In such cases, the information is used solely to process the responsible gaming request and is handled with strict confidentiality.

sona1011 processes your personal data only where a lawful basis exists for doing so. The primary lawful bases on which we rely are: the performance of a contract (operating your account), compliance with legal obligations (KYC and anti-money-laundering requirements), and our legitimate business interests (platform security and fraud prevention). The specific purposes for which we use your data are as follows:

• Account Management: To create, verify, maintain, and administer your sona1011 account, including processing your identity verification documents and updating your account details when you request changes.
• Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and card payment methods, and to maintain accurate records of all financial transactions on your account.
• Legal Compliance: To fulfil our Know Your Customer (KYC) obligations, conduct Anti-Money Laundering (AML) checks, detect and prevent fraudulent activity, and respond to lawful requests from competent authorities.
• Platform Security: To monitor account activity for signs of unauthorised access, collusion, bonus abuse, or any other conduct that violates these Terms, using automated systems and human review where necessary.
• Customer Support: To respond to your support queries via live chat or email, maintain records of support interactions for quality assurance, and improve our service based on feedback.
• Responsible Gaming: To administer self-exclusion requests, deposit limits, cooling-off periods, and session reminders, and to identify accounts that may exhibit signs of problem gambling requiring proactive outreach.
• Personalisation and Marketing: Where you have given consent, to send you relevant promotional offers, bonus notifications, and event-based communications (for example, BPL season promotions or Eid offers). You may withdraw marketing consent at any time by contacting support.
• Analytics and Improvement: To analyse aggregated, anonymised usage patterns across the sona1011 platform in order to improve game selection, interface design, payment flows, and overall player experience.

sona1011 operates with a network of trusted third-party service providers whose involvement is essential to delivering a secure, compliant, and enjoyable platform experience. In each case, data is shared only to the extent strictly necessary and is governed by data processing agreements that bind third parties to confidentiality and security obligations consistent with this policy.

The categories of third parties with whom we may share your personal data include:

• Payment Processors: bKash, Nagad, Rocket, Upay, and card payment gateway providers receive the financial and identity data necessary to process your deposit and withdrawal transactions securely.
• Identity Verification Providers: Third-party KYC service providers may receive copies of identity documents to perform automated or assisted document verification on our behalf.
• Game Content Providers: Studios such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming receive minimal technical session data (such as player ID and session token) required to load and run games within your account environment. They do not receive your full personal profile.
• Fraud Prevention and AML Services: Specialist fraud detection and anti-money-laundering screening providers may receive transaction data and identity data for risk-scoring purposes.
• Cloud and IT Infrastructure Providers: Hosting, database, and content delivery network (CDN) providers store and transmit platform data. All infrastructure providers are required to maintain encryption and access-control standards equivalent to those applied by sona1011 directly.
• Regulatory and Law Enforcement Authorities: Where we are required by law or by a valid legal order to disclose personal data to a government body, regulator, or law enforcement agency, we will do so. We will notify the affected player where we are legally permitted to do so.

sona1011 uses cookies and similar tracking technologies (including pixel tags and local storage) to operate the platform, remember your session preferences, and analyse how players interact with our pages. The following table describes the categories of cookies we use and their purpose:

You may manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies, though disabling strictly necessary cookies will prevent you from logging into and using the sona1011 platform. Detailed instructions for managing cookies are available in the help documentation of your browser (Chrome, Firefox, Safari, Edge, Opera, or Samsung Internet on Android devices commonly used across Bangladesh).

sona1011 does not use advertising cookies or cross-site tracking cookies that follow your activity outside of the sona1011 platform. Analytics data collected is aggregated and anonymised before being used for any reporting or decision-making purpose.

sona1011 applies a layered approach to data security, combining technical controls, organisational policies, and ongoing staff training to protect your personal information against unauthorised access, accidental loss, disclosure, or destruction.

Our principal technical security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the sona1011 servers is encrypted using industry-standard TLS 1.2 or higher. This applies to account logins, payment transactions, and all other data exchanges.
• Encrypted Data Storage: Sensitive personal data and financial records stored on our servers are encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data.
• Access Controls: Access to personal data is restricted to authorised sona1011 personnel on a strict need-to-know basis. All internal access events are logged and subject to periodic audit review.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their sona1011 accounts for an additional layer of login security. Internal administrative systems require mandatory 2FA for all staff.
• Regular Security Assessments: The sona1011 platform and its infrastructure undergo periodic security reviews. Identified vulnerabilities are addressed promptly through our internal security response process.

Regarding data retention: sona1011 retains your personal data for as long as your account remains active and for a minimum period of five years following account closure. This retention period reflects our obligations under applicable financial record-keeping and anti-money-laundering requirements. Transaction records may be retained for longer where required by a legal hold or ongoing investigation. Once the applicable retention period has elapsed and no legal hold applies, your personal data is securely deleted or anonymised.

sona1011 recognises and respects the privacy rights of all players. Subject to applicable legal limitations (including our legal obligations to retain certain records for AML and financial compliance purposes), you have the following rights in relation to your personal data:

• Right of Access: You may request a copy of the personal data we hold about you at any time. We will provide this information within a reasonable timeframe following identity verification.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor account details (such as a contact email address) can be updated directly through your account settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Requests for erasure will be assessed individually.
• Right to Restriction of Processing: In certain circumstances, you may request that we restrict the processing of your data (for example, while you contest its accuracy or object to our use of it).
• Right to Data Portability: Where data has been provided by you and processed on the basis of consent or contract, you may request a machine-readable copy of that data for transfer to another service.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests, though this is subject to our assessment of overriding legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the sona1011 Data Protection contact via email at support@sona1011 with the subject line "Privacy Rights Request". Please include your registered name, account username, and a clear description of your request. We will acknowledge your request within 5 business days and respond in full within 30 calendar days.

sona1011 is an 18+ platform. We do not knowingly collect, store, or process personal data belonging to any individual under the age of 18. Our registration and KYC processes are designed to prevent underage access to the platform, and we actively monitor account activity for indicators that an account may be held by or on behalf of a minor.

If sona1011 discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 18, the following actions will be taken immediately:

• The account in question will be suspended pending investigation.
• All associated personal data will be reviewed and, where the account holder is confirmed to be underage, permanently deleted from our systems.
• Any deposits made will be returned to the source payment method. No winnings generated during the period of underage use will be paid out.
• The incident will be logged internally for compliance and audit purposes.

We strongly encourage parents and guardians of minors to make use of internet filtering tools and parental controls to prevent underage access to online gambling platforms. If you believe a minor has accessed sona1011 using your details or their own, please contact us immediately at support@sona1011 so we can take urgent action.

sona1011 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, platform features, or regulatory guidance. When material changes are made to this policy, we will notify registered players via a prominent notice on the sona1011 platform and, where appropriate, via email to your registered address.

The "Last Updated" date at the top of this page will always reflect the date on which the most recent version of the policy came into effect. We encourage you to review this Privacy Policy periodically so that you remain informed about how your personal data is being handled.

Your continued use of the sona1011 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with any changes to this policy, you should discontinue use of the platform and contact support to request account closure.

For any questions, concerns, or requests relating to this Privacy Policy or to the handling of your personal data by sona1011, please contact us at: support@sona1011. Our support team is available 24/7 via live chat within your account dashboard, and privacy-related written requests are handled by our dedicated data protection contact with responses issued within 30 calendar days.