Privacy Policy
sona121
Your privacy matters to us. This Privacy Policy explains exactly what personal data sona121 collects, why we collect it, how we use and store it, who we share it with, and the rights you hold over your own information as a player on our Bangladesh platform.
What This Policy Covers
Before reading the full policy, here is a plain-English summary of the six most important things to know about how sona121 handles your personal data.
We Collect Only What We Need
sona121 collects personal data that is strictly necessary to operate your account, process deposits and withdrawals in Bangladeshi Taka, verify your identity, and comply with responsible gaming obligations. We do not collect data for its own sake.
Bank-Grade Encryption
All data transmitted between your device and the sona121 platform is protected by TLS 1.3 encryption. Account credentials, payment details, and KYC documents are stored in encrypted form and are never transmitted in plain text at any stage.
No Data Sold to Third Parties
sona121 does not sell, rent, or trade your personal data to any third party for marketing purposes. Data shared with partners — such as game providers and payment processors — is limited to what is operationally necessary and governed by data-processing agreements.
Transparent Cookie Use
sona121 uses cookies and similar tracking technologies to keep your session active, remember your preferences, and analyse site performance. No third-party advertising cookies are deployed. You can manage cookie preferences at any time through your browser settings.
Your Rights Are Respected
You have the right to access, correct, restrict, and request deletion of your personal data held by sona121 at any time. All data subject requests are handled free of charge within 30 days of receipt. Contact our support team at support@sona121 to exercise your rights.
Clear Retention Periods
We retain your personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. Account data is held for a minimum of five years from the date of account closure to satisfy financial record-keeping requirements.
Data We Collect
sona121 collects personal data through several channels: directly from you during registration and account use, automatically through your interactions with the platform, and from third-party sources such as payment processors and identity verification services.
1.1 Data You Provide Directly
When you register an account, deposit funds, request a withdrawal, contact our support team, or participate in a promotion, you voluntarily provide us with personal data. The categories of data collected through direct interaction include:
| Data Category | Examples | Collection Point |
|---|---|---|
| Identity | Full legal name, date of birth, national ID number, passport or driver's licence details | Registration & KYC verification |
| Contact | Email address, mobile phone number (Bangladeshi), residential address | Registration & profile settings |
| Financial | bKash / Nagad / Rocket / Upay mobile wallet numbers, bank account details for bank transfer | Cashier — deposit & withdrawal |
| Account | Username, password (hashed), account preferences, responsible gaming settings | Registration & account settings |
| Communications | Support chat transcripts, email correspondence, feedback submissions | Customer support interactions |
| KYC Documents | Scanned NID card, passport photo page, utility bill, selfie photo for liveness check | Identity & age verification |
1.2 Data Collected Automatically
When you access the sona121 platform, our servers and analytics tools automatically record certain technical and behavioural data. This data is collected regardless of whether you have a registered account and is used primarily for security monitoring, fraud prevention, and platform performance analysis.
- Device & technical data: IP address, device type and model, operating system version, browser type and version, screen resolution, language settings.
- Session data: Login timestamps, session duration, pages visited, features accessed, game rounds initiated, bets placed.
- Location data: Approximate geographic location derived from IP address (country and city level only — no GPS or precise location data is collected).
- Cookie & tracking data: Session tokens, preference cookies, analytics identifiers. See Section 4 for full cookie details.
1.3 Data Received from Third Parties
In certain circumstances, sona121 receives personal data about you from third-party sources. This occurs when:
- A payment processor such as bKash or Nagad confirms a transaction and returns a transaction reference, status, and the mobile wallet number associated with the payment.
- An identity verification service provider returns the result of a document authenticity check or liveness verification performed as part of our KYC process.
- A game provider such as Evolution Gaming or Pragmatic Play returns game round outcome data and session logs in connection with your play activity on our platform.
sona121 does not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has provided us with personal data, we will immediately close the associated account, return any deposited funds to the originating payment instrument, and delete all associated personal data from our systems. If you believe a minor has registered on sona121, please contact us at support@sona121 immediately.
How We Use Your Data
sona121 processes your personal data only where we have a lawful basis for doing so. The primary lawful bases we rely on are: contract performance (processing necessary to provide the services you signed up for), legal obligation (processing required to comply with applicable law), and legitimate interests (processing necessary for fraud prevention, platform security, and responsible gaming compliance, balanced against your privacy interests).
Core Service Delivery
- Creating, verifying, and maintaining your sona121 player account, including identity and age verification in compliance with responsible gaming obligations.
- Processing deposit transactions via bKash, Nagad, Rocket, Upay, and bank transfer in Bangladeshi Taka, and processing withdrawal requests to your verified payment method.
- Providing access to casino games, live dealer tables, sports betting markets, and all other platform features associated with your account.
- Delivering customer support through live chat and email, including responding to account queries, dispute resolutions, and technical assistance requests.
- Sending transactional notifications including deposit confirmations, withdrawal status updates, bonus credit alerts, and account security notifications to your registered email or mobile number.
Security & Fraud Prevention
sona121 uses automated systems and manual review processes to monitor account activity for signs of fraud, money laundering, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions. Where suspicious activity is detected, your account may be placed under temporary review and you may be asked to provide additional verification documents before normal service is restored.
Responsible Gaming Compliance
We use your account activity data — including deposit frequency, session lengths, betting patterns, and interactions with responsible gaming tools — to identify signs of potentially harmful gambling behaviour. This processing is carried out to fulfil our responsible gaming obligations and may result in proactive outreach from our support team, imposition of temporary limits, or referral to professional support resources.
Marketing Communications
With your explicit consent, sona121 may send you promotional communications about bonuses, seasonal offers (including Eid specials, BPL season promotions, and Pohela Boishakh events), and new game launches. You may withdraw your consent to marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting us at support@sona121. Withdrawal of marketing consent does not affect the processing of transactional communications, which are sent regardless of marketing preferences.
Marketing opt-out: You can manage your communication preferences directly in your account settings page under "Notification Preferences". Changes take effect within 48 hours of the update being saved.
Data Sharing & Third Parties
sona121 does not sell your personal data to any third party. We share personal data with third parties only where doing so is necessary to deliver our services, comply with a legal obligation, or protect the legitimate interests of our platform and player community. All third-party data processors are bound by contractual obligations requiring them to process your data only for the specific purposes we have authorised and to apply appropriate security measures.
Categories of Third-Party Recipients
- Payment processors: bKash, Nagad, Rocket, Upay, and our banking partners receive transaction data (wallet number, amount in BDT, transaction reference) strictly as necessary to process deposits and withdrawals.
- Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed studio partners receive a session token and anonymised player identifier to authenticate your game session. They do not receive your full name, payment details, or contact information.
- Identity verification services: Our KYC partner receives document images and selfie photos you upload during the verification process and returns a verification result. KYC documents are not retained by the provider beyond the verification session.
- Analytics providers: Aggregated, anonymised platform usage data is processed by analytics services to help us understand traffic patterns and improve the user experience. No personally identifiable information is shared with analytics providers.
- Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, financial intelligence units, or other public authorities where required to do so by applicable law, court order, or regulatory direction.
All third-party data processors engaged by sona121 are required to maintain appropriate technical and organisational security measures commensurate with the sensitivity of the data they process. sona121 conducts periodic reviews of third-party data processing arrangements to ensure continued compliance.
Cookies & Tracking
sona121 uses cookies — small text files stored on your device — and similar tracking technologies (such as web beacons and local storage) to operate the platform, maintain your session, remember your preferences, and analyse how the site is used. We do not deploy third-party advertising or retargeting cookies.
Cookie Categories We Use
| Category | Purpose | Duration | Can Be Disabled? |
|---|---|---|---|
| Strictly Necessary | Maintaining your logged-in session, CSRF protection tokens, load balancer routing | Session | No — required for platform operation |
| Functional | Remembering your language preference, game lobby layout choice, responsible gaming settings | 30 days | Yes — via browser settings |
| Analytics | Aggregated page view counts, session duration, error rate monitoring — no personal identification | 13 months | Yes — via browser settings |
| Security | Device fingerprinting tokens used to detect account takeover attempts and unusual login patterns | 90 days | No — required for account security |
Managing Your Cookie Preferences
You can control and delete cookies through your browser settings at any time. Most modern browsers allow you to block third-party cookies, clear all stored cookies, or receive a notification before a cookie is stored. Please note that disabling strictly necessary or security cookies will impair the functionality of your sona121 account and may prevent you from logging in or completing transactions. Browser-level cookie management instructions are available in your browser's help documentation.
sona121 does not use cookies for cross-site advertising, behavioural profiling for sale to third parties, or any purpose beyond those listed in the table above. We review our cookie inventory periodically and update this section whenever a new cookie category is introduced.
Data Retention
sona121 retains your personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The table below summarises our standard retention periods by data category.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & identity data | 5 years from account closure | Financial record-keeping & anti-money laundering obligations |
| KYC documents | 5 years from account closure | Regulatory compliance & potential dispute resolution |
| Transaction records | 7 years from transaction date | Financial audit trail requirements |
| Game round & betting history | 3 years from account closure | Dispute resolution & responsible gaming monitoring |
| Customer support records | 3 years from last interaction | Service quality & dispute resolution |
| Marketing consent records | 3 years from consent or withdrawal | Proof of consent & regulatory compliance |
| Analytics & session logs | 13 months on a rolling basis | Platform performance monitoring |
| Self-exclusion records | Indefinite for permanent exclusions | Prevention of re-registration by permanently excluded players |
Upon expiry of the relevant retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Where data is anonymised rather than deleted, the resulting anonymised dataset may be retained indefinitely for statistical analysis purposes.
If you submit a data deletion request before the end of a mandatory retention period, sona121 will suppress your data from active processing and restrict it to the minimum access necessary to fulfil the legal retention obligation. Once the retention period expires, the data will be fully deleted in accordance with our standard deletion schedule.
Data Security
sona121 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme is reviewed and updated on a continuous basis to address emerging threats.
Technical Measures
- Transport encryption: All data in transit between your device and sona121 servers is encrypted using TLS 1.3. Connections over older protocol versions are rejected.
- Data at rest: Sensitive data fields — including passwords (bcrypt hashed), payment instrument identifiers, and KYC document files — are encrypted at the storage layer using AES-256.
- Two-factor authentication: All player accounts are protected by SMS OTP two-factor authentication on login. Staff accounts with access to player data are subject to mandatory two-factor authentication using hardware security tokens.
- Penetration testing: The sona121 platform undergoes regular third-party penetration testing. Critical vulnerabilities are remediated within 24 hours of discovery; high-severity findings within 72 hours.
- Intrusion detection: Automated intrusion detection and anomaly-based alerting systems monitor platform infrastructure around the clock for signs of unauthorised access.
Organisational Measures
- Access to player personal data is restricted to sona121 staff on a strict need-to-know basis and is logged for audit purposes.
- All employees with access to personal data are required to complete data protection training before gaining access and annually thereafter.
- Third-party vendors with access to personal data are subject to contractual data security obligations and periodic security assessments.
Data Breach Response
In the event of a personal data breach that poses a risk to your rights and freedoms, sona121 will notify affected players by email to their registered address without undue delay, and in any case within 72 hours of becoming aware of the breach, where technically and legally feasible. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures taken or proposed to address the breach.
Your role in keeping your account secure: sona121's technical measures are only one layer of defence. You play an important role in account security. Never share your password or OTP codes with anyone — including people who claim to represent sona121. We will never ask you for your password by email, chat, or phone. If you suspect your account has been compromised, contact support@sona121 immediately and change your password.
Your Privacy Rights
As a data subject, you hold a number of rights over the personal data that sona121 holds about you. These rights are set out below. To exercise any of these rights, please submit your request in writing to support@sona121. We will respond to all data subject requests free of charge within 30 days of receipt. In exceptional cases requiring additional processing time, we will notify you within the initial 30-day period and provide an estimated resolution date.
Please note that certain rights — particularly erasure and portability — may be limited where sona121 is required to retain your data to comply with a legal obligation (such as anti-money laundering record-keeping requirements) or to defend against a legal claim. Where a right cannot be exercised in full, we will explain the specific reason in our response to your request.
Contact & DPO
If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or wish to report a privacy concern, please contact the sona121 data protection team using the details below. All privacy-related correspondence should be directed to our support team, who will route your enquiry to the appropriate internal team.
Contact Details
- Email: support@sona121 — please include "Privacy Request" or "Data Subject Request" in the subject line so your email is prioritised correctly.
- Response time: We aim to acknowledge all privacy-related emails within 2 business days (Bangladesh Standard Time, BST UTC+6) and to resolve data subject requests within 30 calendar days.
- Language: Privacy requests may be submitted in English. We are unable to process requests submitted in other languages at this time.
Changes to This Privacy Policy
sona121 reserves the right to update this Privacy Policy at any time. When material changes are made — for example, when a new category of data is collected or a new third-party processor is engaged — we will notify registered players by email to their registered address at least 7 days before the changes take effect. The "Effective Date" at the top of this page and in the page hero will be updated to reflect the date on which the revised policy comes into force. Your continued use of the sona121 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should close your account before the effective date and cease using the platform.
We recommend bookmarking this page and reviewing it periodically, particularly around the start of each year when our annual policy review cycle is completed. The most current version of the Privacy Policy is always available at sona121/privacy-policy.
Explore sona121 Responsibly
Now that you understand how we protect your data, enjoy everything sona121 has to offer — from live cricket betting to premium slots and live baccarat tables — with full confidence in our privacy standards.