Privacy Policy — sona102 Bangladesh

1. Data We Collect

sona102 collects personal data from you in several ways: directly when you register an account or interact with the platform, automatically as you use the site, and occasionally from trusted third-party sources such as payment processors and identity verification services. The categories of data we collect are described in detail below.

1.1 Registration and Account Data

When you create a sona102 player account, we collect the information you provide during the registration process. This includes your full legal name, date of birth, residential address in Bangladesh (including division, district, and postcode), a valid email address, and a mobile phone number. This information is required to establish your identity, verify your eligibility to use the platform, and maintain your account.

1.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations and to confirm that players are aged 18 or above, we may request and retain copies of government-issued identity documents. Accepted documents include your National Identity Card (NID), passport, or birth certificate. We may also request proof of address and proof of ownership of the payment method used to fund your account (such as a screenshot of your bKash or Nagad account). KYC documents are stored securely and accessed only by authorised compliance staff.

1.3 Financial Transaction Data

We record details of all deposits and withdrawals made through your sona102 account, including transaction amounts in Bangladeshi Taka (৳), timestamps, payment method type (bKash, Nagad, Rocket, Upay, DBBL, City Bank, BRAC Bank), and transaction reference numbers. We do not store full payment credentials such as mobile banking PINs or full bank account numbers.

1.4 Betting and Gaming Activity Data

We maintain a full record of your betting and gaming activity on the platform, including bets placed, odds accepted, game sessions, winnings, losses, and bonus usage. This data is used for account management, dispute resolution, responsible gaming monitoring, and the prevention of fraud and match-fixing.

1.5 Technical and Device Data

When you access sona102, we automatically collect certain technical information about your device and browsing session. This includes your IP address, device type, operating system, browser version, screen resolution, referring URL, pages visited, session duration, and clickstream data. This information helps us optimise platform performance and detect suspicious access patterns.

1.6 Communications Data

If you contact sona102 via live chat, email at support@sona102, or any other support channel, we retain a record of those communications, including the content of messages, attachments, and the dates and times of correspondence. This enables us to handle disputes, track support history, and ensure quality of service.

2. How We Use Your Data

sona102 processes your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we process your data are as follows:

• Account creation and management: To register your player account, maintain your profile, and provide access to the full range of sona102 services including cricket betting, live casino, and slot games.
• Identity and age verification: To confirm that you are aged 18 or above and to verify your identity in accordance with applicable KYC requirements before processing withdrawals.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported Bangladesh bank channels, and to reconcile financial records.
• Fraud prevention and security: To detect and prevent unauthorised account access, bonus abuse, money laundering, match-fixing, and other forms of fraud or prohibited conduct described in the sona102 Terms & Conditions.
• Responsible gaming monitoring: To track betting patterns and identify players who may be displaying signs of problem gambling, in order to offer support tools such as deposit limits and self-exclusion.
• Platform improvement and analytics: To analyse user behaviour, identify technical issues, improve the user interface, and develop new features that better serve players in Bangladesh.
• Marketing communications (with consent): To send you promotional offers, bonus notifications, and news about upcoming events such as BPL, IPL, and T20 World Cup betting markets — but only where you have opted in to receive such communications.
• Legal compliance: To comply with applicable laws, respond to lawful requests from regulatory authorities, and maintain records as required by law.
• Customer support: To handle your enquiries, resolve disputes, and maintain a record of support interactions for quality assurance purposes.

2.1 Automated Decision-Making

sona102 may use automated systems to assist with fraud detection, bonus abuse identification, and responsible gaming risk scoring. Where an automated process results in a significant decision affecting your account — such as a withdrawal hold or account restriction — you have the right to request human review of that decision by contacting our support team.

3. Data Sharing and Disclosure

sona102 does not sell your personal data to third parties. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

3.1 Payment Service Providers

To process your deposits and withdrawals, we share necessary transaction data with your chosen payment provider — such as bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank. These providers are bound by their own privacy and security obligations and process your data solely to execute the relevant financial transaction.

3.2 Identity Verification Partners

We may engage third-party identity verification services to assist with KYC processing. These partners receive only the minimum data required to complete verification — typically a copy of your identity document — and are contractually prohibited from using that data for any other purpose.

3.3 Game Software Providers

When you play games powered by third-party providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, limited session data (such as player ID and bet values) is shared with the relevant provider to facilitate game operation and result verification. These providers do not receive your full personal profile or payment details.

3.4 Legal and Regulatory Authorities

sona102 may disclose your personal data to law enforcement agencies, government authorities, or courts where we are legally required to do so — for example, in response to a lawful court order, to report suspected financial crime, or to cooperate with a regulatory investigation. We will disclose only the minimum data required in response to such requests.

3.5 Business Transfers

In the event that sona102 undergoes a merger, acquisition, or sale of assets, your personal data may form part of the transferred assets. In such circumstances, you will be notified via the registered email address and the privacy protections described in this policy will continue to apply to your data under any successor entity.

3.6 No Third-Party Marketing Sharing

sona102 will never share your email address, phone number, or any other personal data with third-party marketing companies, data brokers, or advertising networks. Your contact details are used exclusively for sona102's own communications (with your consent) and for the operational purposes described in this policy.

4. Cookies and Tracking Technologies

sona102 uses cookies and similar technologies — including local storage and session storage — to deliver a functional, personalised, and secure experience on our platform. This section explains what cookies we use, why we use them, and how you can manage your preferences.

4.1 What Are Cookies?

A cookie is a small text file placed on your device by a website you visit. Cookies allow a website to recognise your device across page requests and sessions, store your preferences, and track certain aspects of your browsing behaviour. Cookies cannot execute programmes or deliver viruses to your device.

4.2 Types of Cookies We Use

4.3 Managing Cookie Preferences

You may manage or disable non-essential cookies at any time through your browser settings. Most modern browsers allow you to block or delete cookies via the privacy or settings menu. Please note that disabling essential cookies may prevent certain features of the sona102 platform from working correctly, including the ability to log in and maintain an active session. sona102 does not currently use third-party advertising cookies or cross-site tracking pixels.

5. Data Security and Storage

The security of your personal data is a top priority at sona102. We implement a combination of technical, administrative, and physical safeguards to protect your information against unauthorised access, disclosure, alteration, or destruction.

5.1 Technical Safeguards

• TLS/SSL Encryption: All data transmitted between your device and sona102 is encrypted using Transport Layer Security (TLS) protocols. Our platform is SSL-certified and displays a padlock indicator in your browser address bar.
• Password Hashing: Player passwords are stored using industry-standard one-way hashing algorithms. We do not store your password in plain text and we cannot retrieve it — only reset it.
• Access Controls: Access to player data is restricted on a strict need-to-know basis. Internal systems require multi-factor authentication for privileged access, and all access events are logged.
• Intrusion Detection: Our infrastructure is monitored around the clock for suspicious activity, unusual access patterns, and potential security incidents.

5.2 Storage Location

Player data is stored on secured servers. sona102 takes reasonable steps to ensure that any data processors or hosting partners we engage apply security standards that are at least equivalent to those described in this policy, regardless of where those servers are physically located.

5.3 Data Breach Response

In the unlikely event of a data breach that poses a risk to your rights or freedoms, sona102 will notify affected players as promptly as practicable. Notifications will be sent to your registered email address and will explain the nature of the breach, the data affected, the steps we have taken to contain it, and any recommended actions on your part.

5.4 Your Role in Data Security

While sona102 takes extensive measures to protect your data, you also play an important role in keeping your account secure. You should use a strong, unique password for your sona102 account, enable any two-factor authentication features offered by the platform, and never share your login credentials with any other person. If you suspect your account has been compromised, contact our support team immediately.

6. Your Rights Over Your Data

As a sona102 player, you hold a number of rights with respect to the personal data we process about you. These rights are described below. To exercise any of these rights, please contact our support team via live chat or by emailing support@sona102. We will respond to all valid requests within a reasonable timeframe.

• Right of Access: You may request a copy of the personal data sona102 holds about you, along with information about how it is being processed. This is sometimes referred to as a Subject Access Request (SAR).
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it.
• Right to Erasure: In certain circumstances — such as where data is no longer necessary for the purpose for which it was collected — you may request that we delete your personal data. Note that legal retention obligations (described in Section 7) may limit our ability to fulfil erasure requests in full.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances, for example while the accuracy of data you have disputed is being verified.
• Right to Data Portability: Where technically feasible, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object to Marketing: You may withdraw your consent to receive marketing communications from sona102 at any time, either via your account settings or by contacting support. Withdrawal of marketing consent does not affect our right to send you service-related communications (such as security alerts or account notifications).
• Right to Request Human Review: Where sona102 has made a significant automated decision affecting your account, you have the right to request that a human member of staff reviews that decision.

7. Data Retention Policy

sona102 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

After the applicable retention period has elapsed, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Anonymised or aggregated data (from which no individual can reasonably be identified) may be retained beyond these periods for statistical and analytical purposes.