Privacy Policy — sonbahis

01 Data We Collect

sonbahis collects personal data in several ways: information you provide directly when registering or using the platform, data generated automatically through your interaction with the platform, and information received from third parties such as payment providers and identity verification services. The categories of personal data we collect are described below.

Account Registration Data

When you register a player account on sonbahis, you are required to provide the following information: your full legal name, date of birth, residential address (including city, district, and postal code), email address, and mobile number. This data is used to create and administer your account, verify your age and identity, and communicate with you about your account activity.

Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, we may request copies of government-issued identification documents — such as your National ID card, passport, or driving licence — as well as proof of residential address (a recent utility bill or bank statement) and evidence of ownership of your registered payment method. KYC data is collected solely for the purpose of verifying your identity, confirming your age, and complying with applicable anti-money laundering obligations.

Payment & Transaction Data

When you make a deposit or request a withdrawal, we collect the details necessary to process that transaction. For mobile financial services such as bKash, Nagad, Rocket, and Upay, this includes your registered mobile number and transaction reference numbers. For bank transfers via Dutch-Bangla Bank, City Bank, BRAC Bank, or other supported Bangladeshi banks, this includes account holder name and transaction references. We do not store full bank account numbers or mobile wallet PINs on our servers.

Platform Activity Data

We automatically collect data about how you use the sonbahis platform, including: games played, betting history, session duration, deposit and withdrawal history, bonus activation and wagering progress, and in-platform communication logs (e.g., live chat transcripts with support agents). This data is used to manage your account, detect fraud, resolve disputes, and improve the platform experience.

Technical & Device Data

When you access sonbahis, our servers automatically record certain technical information including your IP address, browser type and version, operating system, device type (desktop, smartphone, tablet), screen resolution, referring URL, and timestamps of platform access. This information is used for security monitoring, fraud prevention, and platform performance analytics.

02 How We Use Your Data

sonbahis processes your personal data for specific, defined purposes only. We do not use your data for purposes that are incompatible with those stated at the time of collection. The primary purposes for which we use your data are as follows:

• Account Management: Creating, maintaining, and administering your player account, including processing deposits, withdrawals, and bonuses; managing your betting and gaming history; and responding to account-related enquiries.
• Identity Verification & Age Confirmation: Conducting KYC checks to verify that you are who you claim to be and that you meet the minimum age requirement of 18 years. This is both a legal obligation and a responsible gaming measure.
• Payment Processing: Facilitating deposits and withdrawals through your chosen payment method — bKash, Nagad, Rocket, Upay, or bank transfer — and maintaining accurate financial records of all transactions.
• Fraud Prevention & Security: Monitoring platform activity to detect and prevent fraud, money laundering, multi-accounting, bonus abuse, and other prohibited conduct. IP addresses and device data are used to identify suspicious access patterns.
• Legal & Regulatory Compliance: Retaining transaction records and identity verification data for the periods required by applicable anti-money laundering (AML) and counter-terrorism financing (CTF) regulations. Reporting obligations under applicable law may require us to disclose certain data to regulatory or law enforcement authorities.
• Platform Improvement: Analysing aggregated, anonymised usage data to understand how players interact with the platform, which games and features are most popular, and where the user experience can be improved. Individual players are not identified in this analytical process.
• Player Communications: Sending you transactional emails and in-platform notifications related to your account — such as deposit confirmations, withdrawal updates, KYC requests, and security alerts. With your explicit consent, we may also send you promotional communications about offers, new games, and seasonal promotions relevant to players in Bangladesh. You may withdraw consent for marketing communications at any time.
• Responsible Gaming: Using your activity data to identify patterns that may indicate problem gambling behaviour, and to enforce any deposit limits, session limits, cooling-off periods, or self-exclusion measures that you have activated on your account. See our Responsible Gaming page for full details.

sonbahis processes your personal data on the following legal grounds: performance of a contract (your account agreement with us), compliance with a legal obligation, legitimate interests (fraud prevention, platform security), and, for marketing communications, your explicit consent.

03 Data Sharing & Third Parties

sonbahis does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share your data with third parties only in the limited circumstances described below, and only to the extent necessary to fulfil the relevant purpose.

• Payment Service Providers: When you make a deposit or request a withdrawal, we share the minimum necessary transaction data with your chosen payment provider — bKash, Nagad, Rocket, Upay, or your designated Bangladeshi bank — in order to process the transaction. These providers have their own privacy policies governing their use of your data.
• Identity Verification Partners: sonbahis uses third-party KYC and AML screening services to assist with the verification of player identities and the screening of transactions against sanctions lists and politically exposed person (PEP) databases. These partners process your identity data under strict confidentiality agreements and may not use it for any other purpose.
• Game Technology Providers: The casino games and sports betting markets available on sonbahis are powered by licensed third-party providers including Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, NetEnt, and Spribe. These providers may receive anonymised session data to support game performance, fairness auditing, and dispute resolution. They do not receive your full personal profile.
• Legal & Regulatory Authorities: sonbahis may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or other binding legal instrument. We will notify you of any such disclosure where we are legally permitted to do so.
• Platform Infrastructure Providers: sonbahis uses third-party cloud infrastructure, database, and analytics services to operate the platform. These providers act as data processors on our behalf, under data processing agreements that restrict their use of your data to the purposes we specify. They may not process your data for their own independent purposes.

04 Cookies & Tracking Technologies

sonbahis uses cookies and similar tracking technologies — including local storage objects and session tokens — to operate the platform, remember your preferences, maintain your login session, and monitor platform performance. The following categories of cookies are in use on sonbahis:

Strictly necessary cookies cannot be disabled, as they are essential to the secure operation of your account. Functional, analytics, and performance cookies may be managed through your browser settings. Most modern browsers allow you to block or delete cookies; however, disabling certain cookies may affect the functionality of the sonbahis platform, including the ability to maintain a logged-in session.

sonbahis does not use third-party advertising cookies or cross-site tracking technologies that would allow external advertisers to build profiles of your browsing behaviour across the wider internet.

05 Data Retention & Storage

sonbahis retains your personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable legal obligations. The following general retention periods apply:

• Active Account Data: Personal data associated with an active player account is retained for the lifetime of the account plus an additional period following account closure, as described below.
• Account Closure: Following the closure of a player account — whether at the player's request or by sonbahis — we retain your personal profile, transaction history, KYC documents, and account activity records for a minimum of five (5) years. This retention period is required to comply with anti-money laundering obligations and to enable us to respond to any regulatory investigations, legal proceedings, or dispute resolution requests that may arise after closure.
• Financial Transaction Records: All records of deposits, withdrawals, and betting transactions are retained for a minimum of five (5) years from the date of the transaction.
• KYC Documents: Identity verification documents are retained for the duration of your account and for five (5) years following account closure.
• Marketing Consent Records: Records of your consent to receive marketing communications — and any subsequent withdrawal of that consent — are retained for the duration of the account and for three (3) years following account closure, to enable us to demonstrate compliance with consent requirements.
• Technical Logs: Server access logs and security event logs are retained for up to twelve (12) months, after which they are deleted or permanently anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted from active systems and backups, or irreversibly anonymised so that it can no longer be linked to any individual. sonbahis conducts periodic data audits to ensure that retention schedules are being applied correctly across all systems.

06 Data Security Measures

sonbahis takes the security of your personal data seriously and maintains a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure. Our key security measures include:

• SSL/TLS Encryption in Transit: All data transmitted between your browser or mobile device and the sonbahis platform is encrypted using SSL/TLS protocols. This protects your login credentials, payment details, and personal information from interception during transmission.
• Encryption at Rest: Sensitive personal data — including KYC documents, payment method details, and account credentials — stored on sonbahis's servers is encrypted at rest using AES-256 encryption.
• Access Controls: Access to player personal data within sonbahis is restricted on a strict need-to-know basis. Employees and contractors are granted access only to the data required to perform their specific job function. All internal access is logged and audited.
• Two-Factor Authentication: sonbahis supports and encourages the use of two-factor authentication (2FA) on player accounts to reduce the risk of unauthorised access, even in the event that login credentials are compromised.
• Penetration Testing & Vulnerability Management: The platform undergoes periodic security assessments, including penetration testing by qualified third-party security professionals, to identify and remediate vulnerabilities before they can be exploited.
• Fraud Monitoring: sonbahis operates continuous automated fraud monitoring systems that analyse login patterns, transaction behaviour, and device fingerprints to detect and block suspicious activity in real time.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected players, sonbahis will notify affected individuals and relevant authorities as required by applicable law, and as promptly as operationally possible.

07 Your Privacy Rights

As a player on sonbahis, you have the following rights in relation to your personal data. These rights may be exercised at any time by contacting our data support team via the details provided in the next section.

• Right of Access: You have the right to request a copy of the personal data that sonbahis holds about you. We will provide this information in a structured, commonly used format within 30 days of receiving your verified request.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly through the account settings section of the platform.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no legal obligation requires its continued retention. Please note that financial transaction records and KYC documents are subject to mandatory legal retention periods and cannot be deleted on request during those periods.
• Right to Restrict Processing: In certain circumstances — for example, if you contest the accuracy of your data or object to its processing — you may request that sonbahis restrict the processing of your data while the matter is under review.
• Right to Data Portability: Where your data is processed on the basis of consent or contract performance, and processing is carried out by automated means, you have the right to receive your personal data in a portable, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. To opt out of marketing communications from sonbahis, follow the unsubscribe link in any marketing email or contact the support team directly.
• Rights Related to Automated Decision-Making: Where sonbahis makes decisions about your account solely through automated processing — for example, automated fraud detection leading to account suspension — you have the right to request human review of that decision.

To exercise any of the above rights, please contact the sonbahis data support team in writing via email at support@sonbahis. We may ask you to verify your identity before processing your request, to ensure that we do not disclose or modify data belonging to another individual. We will respond to all verifiable data rights requests within 30 days. In cases of particular complexity, this period may be extended by a further 30 days, and you will be notified of the extension and the reason for it.

08 Policy Updates & Contact

sonbahis reviews and updates this Privacy Policy periodically to reflect changes in platform functionality, applicable legal requirements, or our data processing practices. When material changes are made to this policy, we will notify registered players by email to their registered address and display a prominent notice on the sonbahis platform for a minimum of 30 days following the update.

The date shown at the top of this policy ("Last Updated") indicates when the most recent revision was made. We recommend that you review this page periodically, even if you have not received a notification, to stay informed of how your data is being handled. Older versions of this policy are available on request from our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or sonbahis's data processing practices, please contact us using the following details:

• Email: support@sonbahis (please include "Privacy Policy Enquiry" in the subject line)
• Live Chat: Available 24 hours a day, 7 days a week through the sonbahis platform
• Response Time: All privacy-related enquiries are acknowledged within 24 hours on business days (Sunday through Thursday, 9am–5pm BST, UTC+6) and resolved within 30 days

sonbahis is committed to resolving all privacy-related complaints fairly and promptly. If you are not satisfied with our response to a privacy concern, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.