sona 108 Privacy Policy

1 Data Controller & Scope

sona 108 ("the Platform", "We", "Us", "Our") is the data controller responsible for the personal information collected through the sona-108.com website and all associated services offered under the sona 108 brand. As data controller, sona 108 determines the purposes for which personal data is processed and the means by which that processing takes place.

This Privacy Policy applies to all individuals who interact with the sona 108 platform, including:

• Registered players who hold an active sona 108 account.
• Visitors who browse the sona-108.com website without completing registration.
• Former players whose account has been closed or deactivated but whose data we are required to retain for a defined period.
• Individuals who contact sona 108 via support channels, including email and live chat, regardless of whether they hold an account.

This Policy does not apply to third-party websites or services that may be linked from the sona 108 platform. sona 108 does not control the privacy practices of third-party providers and recommends that you read the relevant privacy documentation of any external service you access.

1.1 Contact Details for Privacy Enquiries

All privacy-related enquiries, data access requests, correction requests, and deletion requests should be directed to the sona 108 support team. Our English-speaking privacy team is available 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).

Privacy Contact: [email protected]

2 Information We Collect

sona 108 collects personal data through several channels: directly from you when you register or interact with the platform, automatically as you use the platform through cookies and analytics tools, and from third-party sources such as payment processors and identity verification services. The categories of data we collect are described below.

2.1 Registration & Identity Data

When you create a sona 108 account, we collect the following information:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (required for age verification — players must be 18 or above).
• Residential address in Bangladesh (district, city, and full address).
• Mobile number registered with a Bangladesh SIM card.
• Email address (where provided during registration).
• Username and encrypted password.

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, you may be required to submit:

• A copy of your National Identity Card (NID), passport, or birth certificate.
• A recent utility bill or bank statement as proof of Bangladesh residential address.
• Evidence of ownership of the payment method used (e.g., bKash or Nagad account details).
• A selfie photograph in some cases, to confirm the identity document belongs to you.

2.3 Financial & Transaction Data

To process deposits and withdrawals, we collect and retain:

• Transaction amounts in BDT.
• Payment method identifiers (e.g., the registered mobile number for bKash, Nagad, or Rocket; the last four digits of a Visa or Mastercard).
• Transaction timestamps and reference numbers.
• Deposit and withdrawal history for your account lifetime.
• Bank account details where bank transfer is used (Dutch-Bangla Bank, City Bank, BRAC Bank, etc.).

2.4 Gameplay & Betting Data

We collect records of your activity on the sona 108 platform, including:

• Game sessions played, including game name, stake amounts, outcomes, and duration.
• Sports bets placed, including event selection, market, odds, and settlement result.
• Bonus offers claimed and wagering activity associated with those offers.
• Account balance history over time.

2.5 Technical & Device Data

Automatically collected technical data includes:

• IP address and approximate geographic location derived from IP.
• Device type, operating system, and browser information.
• Session start and end times.
• Pages visited within the sona 108 platform and click-path data.
• Referring website or source (where applicable).

2.6 Communications Data

If you contact sona 108 support or respond to promotional communications, we retain:

• The full content of email exchanges between you and our support team.
• Live chat transcripts where live chat support is used.
• Records of promotional emails opened, clicked, or unsubscribed from.
• Support ticket history and resolution records.

3 How We Use Your Data

sona 108 processes the personal data described in Section 2 for the following specific and documented purposes. We do not use your data for any purpose that is incompatible with the original reason for which it was collected.

3.1 Responsible Gaming Use of Data

sona 108 uses gameplay and financial data to monitor player behaviour for signs of problem gambling. This includes tracking deposit frequency, session duration, wagering patterns, and self-exclusion history. Where our automated systems or support team identify indicators of at-risk behaviour, we may proactively contact you with responsible gaming resources or apply temporary account restrictions. This use of data is in your direct interest and forms a core part of our duty of care as an operator.

3.2 Marketing Communications

sona 108 will only send you promotional emails, SMS notifications, or platform messages about offers and bonuses if you have actively opted in to receive such communications. You may withdraw your consent to marketing at any time by contacting [email protected]. Withdrawal of marketing consent does not affect your account status or your access to any services.

4 Legal Basis for Processing

sona 108 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is required to fulfil our contractual obligations to you as a registered player — including account management, payment processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including age verification, anti-money laundering (AML) obligations, and KYC requirements.
• Legitimate interests: Processing carried out to pursue sona 108's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, analytics, and product improvement — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily used for marketing communications. You may withdraw consent at any time without detriment to your account.

Where processing is based on legitimate interests, sona 108 has conducted a balancing assessment to confirm that our interests do not override your rights. The results of these assessments are available upon request by contacting [email protected].

5 Data Sharing & Third Parties

sona 108 does not sell or commercially transfer your personal data to third parties. However, in order to operate the platform effectively and meet our legal obligations, we share certain categories of personal data with the following categories of third-party recipients:

5.1 Payment Service Providers

To process deposits and withdrawals, sona 108 shares necessary financial and identity data with payment processors including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. Each payment provider operates under its own privacy policy and data protection obligations. We share only the minimum data required to complete each transaction.

5.2 Identity Verification Providers

KYC documents submitted during the verification process may be reviewed by third-party identity verification service providers engaged by sona 108. These providers are contractually bound to process your data exclusively for verification purposes and are prohibited from using it for any other purpose.

5.3 Game Technology Providers

The casino games and sports betting markets available on sona 108 are powered by third-party technology providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. Aggregated, anonymised gameplay data may be shared with these providers for technical performance purposes. No personally identifiable information is shared with game providers beyond what is technically necessary to deliver the game session.

5.4 Fraud Prevention & Security Services

sona 108 uses third-party fraud detection and cybersecurity services that may process technical data (including IP addresses, device fingerprints, and behavioural patterns) to identify suspicious activity. These services operate under strict data processing agreements with sona 108.

5.5 Legal & Regulatory Disclosure

sona 108 may disclose personal data to law enforcement authorities, financial intelligence units, or other competent public bodies where we are legally required to do so — for example, in connection with a criminal investigation, an anti-money laundering inquiry, or a court order. In such circumstances, we will disclose only the data specifically required by the relevant authority.

6 Cookies & Tracking Technologies

sona 108 uses cookies and similar technologies (including local storage, session tokens, and pixel tags) on the sona-108.com platform. These technologies enable core platform functionality, improve the user experience, and provide analytics data that helps us maintain and improve the service.

6.1 Categories of Cookies Used

6.2 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies. However, disabling essential cookies will impair your ability to log in and use core features of the sona 108 platform. Disabling analytics cookies has no effect on your ability to play games or make transactions.

For guidance on managing cookies in the most common browsers used in Bangladesh, we recommend referring to the help documentation of your browser (Chrome, Firefox, Samsung Internet, or Opera). Browser-level cookie controls are the primary mechanism through which you manage cookie consent on the sona 108 platform.

7 Data Retention

sona 108 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following indicative retention periods apply:

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

8 Your Privacy Rights

As a player on the sona 108 platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request" and your registered account details. We will respond within 30 calendar days of receiving a valid request.

8.1 Right of Access

You have the right to request a copy of the personal data that sona 108 holds about you. This includes your registration information, KYC documents on file, transaction history, gameplay records, and support communications. We will provide this information in a clear, structured format.

8.2 Right to Rectification

If any personal data held by sona 108 is inaccurate or incomplete, you have the right to request that it be corrected. Contact our support team with the corrected information and we will update your records promptly, subject to any KYC re-verification that may be required.

8.3 Right to Erasure

You may request the deletion of your personal data in circumstances where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and there is no other legal basis for processing), or where you object to processing on grounds of legitimate interest. Please note that sona 108 is legally required to retain certain data categories (particularly financial and KYC records) for defined periods even after account closure, which may limit our ability to action a full erasure request.

8.4 Right to Restriction

You may request that sona 108 restricts the processing of your personal data — for example, while a rectification request is under review, or where you have objected to processing pending the outcome of a legitimate interest assessment. During a restriction period, we will store your data but will not actively process it beyond what is legally required.

8.5 Right to Object

Where sona 108 processes your data on the basis of legitimate interests, you have the right to object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless the processing is required for legal claims.

8.6 Right to Withdraw Marketing Consent

If you have opted in to receive marketing communications from sona 108, you may withdraw that consent at any time by emailing [email protected] or by using the unsubscribe link in any marketing email. Withdrawal of marketing consent will take effect within 5 business days of your request being received.

9 Data Security Measures

sona 108 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the sona 108 platform.
• Encrypted storage for sensitive data at rest, including passwords (stored as salted cryptographic hashes, never in plain text), KYC documents, and financial records.
• Access controls that restrict internal access to personal data on a strict need-to-know basis. Support agents, for example, can access the data categories necessary to resolve your query — they cannot access your full KYC document archive without specific authorisation.
• Two-factor authentication available for player accounts to add an additional layer of security against unauthorised login.
• Automated threat detection systems that monitor for unusual login patterns, mass data access attempts, and other indicators of a security incident.
• Regular security assessments including vulnerability scanning and penetration testing of the sona 108 platform infrastructure.
• Staff training on data protection, phishing awareness, and secure handling of personal information — all employees with access to player data undergo periodic data security training.

9.1 Data Breach Response

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, sona 108 will notify affected individuals without undue delay and will take immediate steps to contain, investigate, and remediate the breach. Notification will be provided to affected players via the contact details registered on their account.

9.2 Your Responsibilities

While sona 108 takes every reasonable precaution to protect your data, account security also depends on the steps you take as a player. We strongly recommend the following practices to keep your sona 108 account secure:

• Choose a strong, unique password for your sona 108 account and do not reuse it on other platforms.
• Never share your login credentials, one-time passwords (OTPs), or account PIN with anyone — including individuals claiming to represent sona 108 support. Our team will never ask for your password.
• Log out of your sona 108 account when using a shared or public device.
• Enable two-factor authentication on your account where available.
• Contact [email protected] immediately if you suspect your account has been accessed without your authorisation.

10 Policy Updates & Contact

sona 108 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, platform features, or applicable regulations. When material changes are made to this policy, we will notify registered players by posting a prominent notice on the sona 108 platform and, where practicable, by sending a notification to the contact details associated with your account.

The effective date at the top of this policy indicates when the current version was last revised. We encourage you to review this Privacy Policy periodically to stay informed about how sona 108 protects your personal data. Continued use of the sona 108 platform after the effective date of any update constitutes your acceptance of the revised policy.

10.1 Previous Versions

Previous versions of this Privacy Policy are retained in our internal records. If you require access to a prior version of this policy — for example, to understand the terms that applied during a specific period — you may request this by contacting our support team at [email protected].

10.2 Children and Minors

The sona 108 platform is strictly intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has registered on the platform or provided personal data without appropriate parental or guardian consent, we will immediately close the relevant account and delete all associated personal data. If you believe a minor has accessed the sona 108 platform, please notify us at [email protected] so we can take prompt action.

10.3 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the way sona 108 handles your personal data, our dedicated support team is available around the clock:

Email: [email protected]

Availability: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6). English-language support guaranteed.