Privacy Policy — How sona010 Collects, Uses & Protects Your Data

sona010 collects personal data through several channels in the ordinary course of providing its online casino and sports betting services. The categories of data we collect, and the circumstances in which each category is gathered, are described in detail below.

Registration Data

When you create a sona010 account, you are required to provide the following information:

• Full legal name — as it appears on your government-issued identity document
• Date of birth — to verify that you are aged 18 or above
• Residential address — including district, city (e.g., Dhaka, Chittagong, Sylhet, Rajshahi), and postal code
• Mobile number — used for account verification, two-factor authentication, and support contact
• Email address — used for account communications, transaction confirmations, and (where you have opted in) promotional updates
• Username and password — your chosen login credentials; passwords are stored in hashed, salted form and are never visible to sona010 staff

Identity Verification (KYC) Documents

At certain points — including upon your first withdrawal request, upon reaching transaction thresholds, or at the discretion of our compliance team — you may be asked to provide documentary evidence of your identity and address. Acceptable documents include a Bangladesh National Identity Card (NID), passport, driving licence, or a recent utility bill or bank statement in your name. These documents are processed solely for KYC and AML compliance purposes.

Financial Transaction Data

We collect records of all deposits and withdrawals made through your sona010 account, including the payment method used (e.g., bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank), transaction amounts in BDT, timestamps, and transaction reference numbers. We do not store full payment account credentials such as bKash PINs or bank passwords — payment authentication is handled directly by the respective payment provider.

Gameplay and Betting Activity

We maintain records of your betting history, game session data, wager amounts, win/loss outcomes, and bonus redemption activity. This data is used for account management, dispute resolution, responsible gaming monitoring, and the detection of irregular betting patterns that may indicate fraud, collusion, or bonus abuse.

Technical and Device Data

When you access sona010, our servers automatically record certain technical information, including your IP address, browser type and version, operating system, device model, screen resolution, referring URL, pages visited, and session duration. This information is used for platform security, fraud detection, and aggregate analytics — it is not used to personally identify you for marketing purposes.

Communications Data

Any communications you send to sona010 — whether via live chat, email at support@sona010, or any other channel — are retained as part of your support history. These records are used to resolve disputes, train support staff, and maintain an accurate record of the service we have provided to you.

sona010 processes your personal data only where we have a lawful basis for doing so. The primary purposes for which we use your data, and the corresponding legal basis in each case, are set out in the table below.

Marketing Communications

sona010 will only send you promotional emails, SMS notifications, or in-platform marketing messages where you have explicitly opted in to receiving such communications during registration or through your account preferences. You may withdraw your marketing consent at any time by contacting support@sona010 or updating your notification settings within your account. Withdrawing marketing consent does not affect your ability to use the platform or receive transactional communications such as deposit confirmations and withdrawal notifications.

Automated Decision-Making

sona010 uses automated systems to detect suspicious activity, flag potentially problematic gambling patterns, and screen transactions against AML watchlists. Where an automated decision results in a material impact on your account — such as a temporary withdrawal restriction — you have the right to request a manual review of that decision by contacting our compliance team at support@sona010.

sona010 does not sell or rent your personal data to any third party. We share your information only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.

Game and Technology Providers

To deliver our casino and sports betting services, sona010 works with third-party game studios and technology platforms including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. These providers may receive limited session and account data necessary to authenticate your game sessions and record outcomes. All providers are contractually bound to process your data only for the purposes specified and in accordance with data protection standards.

Payment Processing Partners

To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank, sona010 shares the minimum necessary transaction data with these payment service providers. This typically includes your registered mobile number or bank account reference, the transaction amount, and a sona010 transaction identifier. Payment providers process this data under their own privacy policies and security standards.

Legal and Regulatory Disclosure

sona010 may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by a valid legal obligation, court order, or regulatory direction. In such cases, we will disclose only the minimum data required to comply with the legal request and will notify you of the disclosure where we are legally permitted to do so.

Business Transfers

In the event that sona010 undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via platform notification or email, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

sona010 uses cookies and similar technologies (including local storage and session tokens) to operate the platform reliably, remember your preferences, maintain your logged-in session, and gather aggregated analytics about how players interact with the site. We do not use cookies to track your activity across third-party websites or to build advertising profiles.

Types of Cookies We Use

Managing Cookies

Most modern web browsers allow you to view, manage, and delete cookies through the browser's settings menu. Please note that disabling essential or security cookies may prevent you from logging in or using key features of the sona010 platform. Instructions for managing cookies in popular browsers are available on the respective browser's support pages. Disabling analytics or preference cookies will not affect your ability to play games or make transactions.

sona010 retains your personal data only for as long as is necessary to fulfil the purposes described in this policy, or as required by applicable legal and regulatory obligations. The following retention guidelines apply:

• Active account data — retained throughout the lifetime of your account and for a minimum of 5 years following account closure, to comply with AML record-keeping obligations.
• KYC documents — retained for a minimum of 5 years from the date of the last transaction on your account, in line with financial record-keeping requirements.
• Transaction records — retained for a minimum of 5 years from the date of each transaction.
• Support communications — retained for 3 years from the date of the last communication, after which they are securely deleted unless subject to an ongoing dispute.
• Technical and device logs — retained for up to 12 months, after which they are aggregated or permanently deleted.
• Marketing preferences and consent records — retained for as long as your account is active, and for 2 years following account closure or consent withdrawal.

Security Measures

sona010 implements a multi-layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Key security measures include:

• TLS 1.2 / 1.3 encryption for all data in transit between your device and our servers
• AES-256 encryption for sensitive data fields stored at rest, including KYC document files
• Bcrypt password hashing with individual salts — raw passwords are never stored or visible
• Role-based access controls limiting internal data access to authorised personnel on a need-to-know basis
• Regular third-party penetration testing and internal vulnerability scanning
• 24/7 automated intrusion detection and anomaly alerting on all production systems
• Segregated data environments with strict network-level isolation between production and non-production systems

As a registered player on sona010, you hold the following rights with respect to your personal data. These rights may be exercised at any time by contacting our support team at support@sona010. We will respond to all valid data rights requests within 30 days of receipt.

Right of Access

You have the right to request a copy of the personal data that sona010 holds about you, including the categories of data, the purposes for which it is processed, and the parties with whom it has been shared. This is sometimes referred to as a Subject Access Request (SAR). We will provide the requested information in a structured, machine-readable format where technically feasible.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For minor updates such as a change of address or phone number, you may also update your details directly through your account profile settings on the sona010 platform.

Right to Erasure

You may request that sona010 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. Please note that this right is not absolute — we may be required to retain certain data for our legal and regulatory obligations even following a deletion request. Where full erasure is not possible, we will explain which data must be retained and for how long.

Right to Restriction of Processing

You may request that we restrict our processing of your personal data in certain circumstances — for example, while a dispute regarding the accuracy of your data is being resolved, or while an objection to processing is under consideration. During a restriction period, we will hold your data but not actively process it for the purposes you have challenged.

Right to Data Portability

Where processing is based on your consent or the performance of a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON), and to request that we transfer it directly to another controller where technically feasible.

Right to Object

You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. Upon receipt of an objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where the processing is necessary for the establishment or defence of legal claims.

The sona010 platform integrates with a number of third-party service providers in order to deliver a complete, high-quality gambling experience to Bangladeshi players. Each of these providers operates under their own privacy practices, and sona010 takes reasonable steps to ensure that all partners are contractually bound to appropriate data protection standards.

Game Content Providers

Casino game content is supplied by studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Habanero, and Spribe. These providers may process limited session data — such as a tokenised player identifier, wager amounts, and game outcomes — directly through their game engines. This data is used solely to operate the game session and settle results accurately. Game providers do not receive your full personal profile or payment details.

Payment Service Providers

Payment processing for bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank is handled through integrations with each provider's respective payment gateway. sona010 does not store full payment credentials. Each provider's handling of your financial data is governed by their own privacy policy and the applicable Bangladesh Bank regulations.

Analytics and Infrastructure

sona010 uses server-side analytics tools and infrastructure services to monitor platform health, track aggregate usage patterns, and ensure reliable uptime. Any analytical data shared with these providers is anonymised or pseudonymised at the point of collection and cannot be used to identify individual players.

Links to External Resources

This Privacy Policy governs only the sona010 platform. Any references to third-party organisations (such as payment providers or game studios) are provided for informational context only. sona010 is not responsible for the privacy practices of any external website, service, or application, and encourages you to review the privacy policy of any third-party service you interact with independently of sona010.

sona010 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or platform features. The date at the top of this page will be updated whenever a material change is made. Where changes are significant — for example, a new category of data being collected, or a new sharing arrangement with a third party — we will notify registered players via a platform notification or email prior to the change taking effect.

We encourage you to review this Privacy Policy periodically to remain informed about how your data is being handled. Continued use of the sona010 platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with an update to this policy, you should discontinue using the platform and contact us to close your account.

Contact Us About Privacy

If you have any questions, concerns, or complaints about this Privacy Policy or the way sona010 handles your personal data, please reach out to our support team using the contact details below. We take all privacy enquiries seriously and will respond within 5 business days of receipt.

• Email: support@sona010 (plain text — not a clickable link)
• Live Chat: Available 24/7 directly through the sona010 platform
• Support Hours: Peak hours 9:00 am – 12:00 am BST (UTC+6)

This Privacy Policy was last updated on 1 January 2026 and supersedes all previous versions. Thank you for trusting sona010 with your personal information. We remain committed to protecting it with the rigour and transparency that every player deserves.