Privacy Policy

1. Information We Collect

sona100 collects personal data through several channels: information you provide directly during registration and account management, information generated automatically through your use of the platform, and information obtained from trusted third-party sources where permitted. The categories of personal data we collect include the following:

1.1 Registration and Identity Data

When you create an account on sona100, we collect your full legal name, date of birth, email address, phone number, and residential address (including city — such as Dhaka, Chittagong, Sylhet, or Khulna). This information is required to verify your identity, confirm that you meet the 18+ age requirement, and comply with know-your-customer (KYC) obligations that apply to online gaming platforms.

1.2 Financial and Payment Data

To process deposits and withdrawals in Bangladeshi Taka (৳ BDT), sona100 collects payment-related information including your bKash account number, Nagad account number, Rocket number, Upay account details, or Visa/Mastercard details (where applicable). We store only the minimum necessary financial identifiers; full card numbers and mobile banking PINs are never stored on our servers. All payment transactions are processed through encrypted, PCI-DSS-compliant payment gateways.

1.3 Account Activity Data

We record all gaming and betting activity associated with your sona100 account, including game sessions played, wagers placed, deposits made, withdrawals requested, bonuses claimed, and responsible gaming settings configured. This data is essential for account management, dispute resolution, bonus validation, and regulatory compliance.

1.4 Technical and Device Data

When you access sona100, our servers automatically collect technical data including your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, time zone (Bangladesh Standard Time, UTC+6), and referring URLs. This data helps us optimise the platform experience and detect suspicious or fraudulent activity.

1.5 Communications Data

If you contact sona100's English support team via live chat or email, we retain records of those communications, including the content of messages, timestamps, and the nature of any issues raised. These records support quality assurance, dispute resolution, and regulatory audit functions.

2. How We Use Your Data

sona100 uses the personal data described above for the following purposes:

Purpose	Data Used	Legal Basis
Account registration and identity verification	Name, DOB, email, phone, address	Contractual necessity
Processing deposits and withdrawals	Payment method identifiers, transaction history	Contractual necessity
Fraud detection and security monitoring	IP address, device data, activity logs	Legitimate interest
Responsible gaming compliance	Gaming activity, self-exclusion settings	Legal obligation
Customer support and dispute resolution	Communications data, account activity	Contractual necessity
Promotional and bonus communications	Email, gaming preferences	Consent (opt-in)
Platform performance and analytics	Technical and device data, session data	Legitimate interest

sona100 does not use your personal data for any purpose beyond those listed above without first obtaining your explicit consent or where required to do so by law. We do not use automated decision-making processes (including profiling) that produce legal or similarly significant effects without human oversight.

3. Data Sharing and Disclosure

sona100 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may, however, share your data with the following categories of trusted parties under strictly controlled conditions:

• Payment processors: bKash, Nagad, Rocket, Upay, and card-processing partners receive only the transaction data required to execute your deposit or withdrawal. These processors operate under their own privacy policies and are bound by applicable data protection obligations.
• Game technology providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session identifiers and game-state data necessary to deliver their games. No personally identifiable registration data is shared with game providers beyond what is technically required.
• KYC and identity verification services: Third-party identity verification providers may receive copies of identity documents submitted during the KYC process for automated document authenticity checks.
• Fraud prevention and security services: Aggregated or pseudonymised technical data (IP addresses, device fingerprints) may be shared with anti-fraud service providers to detect and prevent unauthorised access and money laundering.
• Legal and regulatory authorities: Where required by applicable law or in response to a lawful request from a competent authority, sona100 may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies.
• Business successors: In the event of a merger, acquisition, or sale of all or a substantial part of sona100's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

All third-party data processors engaged by sona100 are required to implement appropriate technical and organisational security measures and to process personal data solely in accordance with sona100's written instructions.

4. Cookies and Tracking Technologies

4.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. sona100 uses cookies and similar tracking technologies (such as web beacons and local storage objects) to operate the platform, remember your preferences, maintain your session security, and gather analytics data to improve the user experience for players across Bangladesh.

4.2 Types of Cookies We Use

• Strictly necessary cookies: Required for core platform functions including login session management, security token validation, and language preference retention. These cannot be disabled without impairing platform functionality.
• Analytics cookies: Collect anonymised data about how users interact with sona100 — pages visited, time spent, navigation paths, and device type — to help us identify and fix usability issues.
• Functional cookies: Remember your platform preferences (such as currency display in ৳ BDT) and responsible gaming settings between sessions.
• Marketing cookies: Used only where you have given explicit consent, to serve relevant promotional content about sona100 offers on third-party platforms. You may withdraw consent at any time via your account settings.

4.3 Managing Cookies

You can control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of sona100, including logging into your account. For detailed guidance on cookie management in popular browsers, refer to your browser's help documentation.

5. Data Security Measures

sona100 takes the security of your personal data seriously. We implement a layered set of technical and organisational measures to protect your information against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and sona100 servers is encrypted in transit using industry-standard TLS protocols.
• Encrypted data storage: Sensitive personal data fields (including payment identifiers and identity document references) are encrypted at rest using AES-256 encryption.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data undergo security training and are bound by confidentiality obligations.
• Intrusion detection and monitoring: Automated systems continuously monitor for suspicious activity, brute-force attempts, and anomalous login patterns. Alerts trigger immediate investigation by the security team.
• Regular security audits: sona100 conducts periodic security assessments to identify and remediate vulnerabilities in the platform's infrastructure and application layers.
• Two-factor authentication: Players are strongly encouraged to enable two-factor authentication (2FA) on their sona100 accounts for an additional layer of login security beyond password alone.

While sona100 applies rigorous security standards, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying sona100 immediately at support@sona100 if you suspect any unauthorised access to your account.

6. Data Retention

sona100 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. Our standard retention periods are as follows:

Data Category	Retention Period	Reason
Registration and identity data	5 years after account closure	KYC and anti-money laundering obligations
Financial transaction records	7 years after transaction date	Financial record-keeping requirements
Gaming activity logs	3 years after last activity	Dispute resolution and responsible gaming audit
Customer support communications	2 years after ticket closure	Quality assurance and dispute evidence
Marketing consent records	Until consent is withdrawn + 1 year	Proof of lawful marketing basis
Technical and device logs	12 months from collection	Security monitoring and fraud prevention

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Where data has been anonymised rather than deleted, the resulting aggregated data may be retained indefinitely for statistical purposes.

7. Your Rights and Choices

As a registered player on sona100, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact the sona100 privacy team at support@sona100 with the subject line "Privacy Request — [Right Type]".

7.1 Right of Access

You have the right to request a copy of the personal data sona100 holds about you. We will provide this information in a structured, commonly used, machine-readable format within 30 days of receiving a verified request. A single copy is provided free of charge; additional copies may incur a reasonable administrative fee.

7.2 Right to Rectification

If any personal data held by sona100 is inaccurate or incomplete, you have the right to request that it be corrected. Minor account details (such as phone number or email address) can be updated directly within your account settings. For changes to core identity data (name, date of birth), a formal rectification request and supporting documentation are required.

7.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to its processing on legitimate interest grounds. Please note that erasure requests cannot be fulfilled where retention is required by law (for example, KYC records subject to anti-money laundering obligations) or where the data is needed to resolve a pending dispute.

7.4 Right to Restrict Processing

In certain circumstances, you have the right to request that sona100 restrict the processing of your personal data — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed. Restriction does not mean deletion; restricted data is retained but not actively processed.

7.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive the personal data you have provided to sona100 in a structured, machine-readable format and to transmit it to another service provider.

7.6 Right to Object to Marketing

You may withdraw your consent to receive promotional communications from sona100 at any time by updating your notification preferences in your account settings, or by contacting support at support@sona100. Withdrawal of marketing consent does not affect service communications necessary for account management.

8. Contact and Privacy Queries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about how sona100 has handled your personal data, please contact the privacy team using the details below. All correspondence must be in English.

Email: support@sona100
Subject line format: Privacy Request — [Your Request Type]
Response time: Within 10 business days for formal privacy requests

sona100 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via email notification or a prominent notice on the platform. The date of the most recent revision is displayed at the top of this page. Continued use of sona100 following the publication of an updated Privacy Policy constitutes acceptance of the revised terms.