nnoko Privacy Policy

1. Introduction

Welcome to nnoko ("we", "us", "our"). nnoko operates the online casino and sports betting platform accessible at https://nnoko.io (the "Platform"). We are committed to protecting the privacy and personal data of every player who uses our platform.

This Privacy Policy describes how nnoko collects, uses, stores, shares, and protects personal information when you access our website, create an account, make deposits and withdrawals, place bets, play casino games, or otherwise interact with the Platform. It also explains the rights you have in relation to your personal data and how to exercise them.

By registering an account on nnoko or by continuing to use the Platform, you confirm that you have read and understood this Privacy Policy. If you do not agree with how we handle personal data as described in this policy, you should not use the Platform.

This Privacy Policy should be read alongside our Terms & Conditions, which govern the overall use of the nnoko platform. In the event of any conflict between the two documents, the Terms & Conditions shall prevail in respect of gameplay and account rules, while this Privacy Policy governs all data-handling matters.

2. Data We Collect

nnoko collects the following categories of personal data from players:

Data Category	Examples	When Collected
Identity Data	Full legal name, date of birth, gender, National ID number (where provided for KYC)	Registration & KYC verification
Contact Data	Mobile phone number, email address, city of residence (e.g., Dhaka, Chittagong, Sylhet)	Registration
Financial Data	bKash / Nagad / Rocket / Upay account reference, transaction IDs, deposit and withdrawal amounts in BDT (৳)	Deposit & withdrawal transactions
Technical Data	IP address, device type, browser type and version, operating system, screen resolution, session timestamps	Automatically on site visit
Usage Data	Pages visited, games played, bets placed, session duration, click patterns, search queries	Automatically during platform use
Communications Data	Content of live chat conversations, support email correspondence, feedback submissions	When you contact support
KYC Documents	Scanned copies of National ID, passport, or other identity documents provided during verification	Identity verification requests
Responsible Gaming Data	Deposit limits set, self-exclusion requests, cooling-off period records, session time limit configurations	When responsible gaming tools are used

We do not collect or store full card numbers for Visa or Mastercard transactions — only tokenised references provided by our payment processing partners are retained. We do not collect sensitive personal data such as biometric data, racial or ethnic origin, political opinions, religious beliefs, or medical records.

3. How We Collect Data

3.1 Information You Provide Directly

The majority of the personal data nnoko holds is information you voluntarily provide when you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion. You are not obligated to provide this information; however, without it, you may be unable to use key features of the Platform including account creation, deposits, and withdrawals.

3.2 Automatically Collected Data

When you access the nnoko website or app, certain technical data is collected automatically by our servers and analytics systems. This includes your IP address, device identifiers, browser characteristics, and a record of the pages you visit and the actions you take on the Platform. This data is collected to ensure the Platform functions correctly, to detect fraudulent access patterns, and to improve the overall user experience.

3.3 Data from Third Parties

nnoko may receive personal data about you from third-party sources in limited circumstances. For example, payment providers such as bKash and Nagad may share transaction confirmation data with us; identity verification services may share the outcome of document checks; and fraud prevention services may share signals that indicate potentially suspicious activity linked to a device or IP address. All third-party data sources are contractually required to ensure they have a lawful basis for sharing data with us.

4. Legal Basis for Processing

nnoko processes personal data only where we have a valid legal basis to do so. The primary legal bases we rely on are as follows:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws, including KYC and anti-money laundering obligations, financial record-keeping, and cooperation with lawful authority requests.
• Legitimate interests: Processing carried out for purposes that are in nnoko's legitimate business interests and do not override your rights — including fraud detection, security monitoring, platform analytics, and customer service improvement.
• Consent: Processing carried out with your explicit consent — primarily for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. How We Use Your Data

nnoko uses the personal data described in Section 2 for the following purposes:

• Creating, managing, and maintaining your nnoko player account.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer in Bangladeshi Taka (BDT).
• Verifying your identity and age (21+ requirement) in accordance with our KYC process.
• Detecting, investigating, and preventing fraud, money laundering, bonus abuse, and other prohibited activities as defined in the Terms & Conditions.
• Delivering casino games and sports betting markets, including personalising the content and promotions shown to you based on your gaming preferences.
• Administering bonuses, promotions, and loyalty rewards in accordance with applicable promotion terms.
• Providing customer support via live chat and email in English.
• Sending transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts — that are necessary for the operation of your account. These are not marketing messages and cannot be opted out of while your account is active.
• Sending promotional and marketing communications where you have opted in to receive them.
• Operating responsible gaming tools including deposit limit tracking, session monitoring, and self-exclusion records.
• Improving the Platform through analysis of aggregated, anonymised usage data.
• Complying with legal and regulatory obligations applicable to nnoko.

6. Cookies & Tracking Technologies

6.1 What Cookies We Use

nnoko uses cookies and similar tracking technologies (such as local storage and session identifiers) to operate and improve the Platform. The categories of cookies we deploy are:

• Essential cookies: Required for core platform functions such as keeping you logged in, maintaining your session state, and processing transactions securely. These cannot be disabled without impairing your use of the Platform.
• Analytics cookies: Used to understand how players navigate the Platform, which pages are most visited, and where performance issues occur. Data collected is aggregated and anonymised where possible.
• Preference cookies: Used to remember your settings such as language preference, display options, and responsible gaming configurations between sessions.
• Security cookies: Used to detect and prevent fraudulent access attempts, bot activity, and multiple account creation from a single device.

6.2 Managing Cookies

You may manage non-essential cookies through your browser settings. Most modern browsers allow you to block, delete, or restrict cookies for specific websites. Please note that disabling certain cookies may affect your ability to use some features of the nnoko platform, including maintaining a persistent login session. Clearing browser cookies does not delete the personal data nnoko holds on its servers — to exercise data deletion rights, please contact us as described in Section 10.

7. Sharing Your Data

nnoko does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive only the transaction data necessary to complete your deposit or withdrawal. They are not provided with your full gaming history or other account data.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi receive a session token to deliver game content. They may collect anonymised technical data directly from your device for the purpose of delivering the game. Their data practices are governed by their own privacy policies.
• Identity verification services: Where KYC verification is required, your identity documents and biographic data may be shared with a third-party verification provider. The outcome of the check is communicated back to nnoko; the verification provider retains data only as long as necessary to complete the check.
• Fraud and security services: Anonymised or pseudonymised technical signals (IP addresses, device fingerprints) may be shared with fraud detection providers to identify and block prohibited activity.
• Legal and regulatory authorities: nnoko will disclose personal data to law enforcement, financial regulators, or other competent authorities when required to do so by applicable law or pursuant to a valid legal order. We will notify you of such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of nnoko's assets, player data may be transferred to the acquiring entity as part of that transaction. You will be notified via the Platform or by email before your data becomes subject to a different privacy policy.

8. Data Security

nnoko takes the security of your personal data seriously. We implement and maintain the following technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, and destruction:

• 256-bit SSL/TLS encryption on all data transmitted between your browser or device and our servers.
• Encrypted storage of sensitive personal data including passwords (which are stored as salted hashes and never in plain text), KYC documents, and financial records.
• Role-based access controls ensuring that only authorised personnel with a verified need to access specific player data can do so.
• Intrusion detection and monitoring systems that flag unusual access patterns and potential security incidents in real time.
• Regular security assessments of our infrastructure, application code, and third-party integrations.
• Two-factor authentication requirements for internal staff accessing player data systems.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in risk to your rights or freedoms, nnoko will notify affected players promptly and take immediate steps to contain the breach and mitigate harm.

You also play a role in keeping your account secure. We strongly recommend using a strong, unique password for your nnoko account, enabling any available two-factor authentication, and logging out of your account when using shared devices. Do not share your login credentials with anyone. nnoko staff will never ask for your password.

9. Data Retention

nnoko retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following standard retention periods apply:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	Contractual and legal obligations
Financial transaction records	7 years from transaction date	Standard financial record-keeping requirements
KYC documents	7 years from submission date	Identity verification and anti-money laundering compliance
Customer support correspondence	3 years from last interaction	Quality assurance and dispute resolution
Gaming history and bet records	Duration of account + 5 years after closure	Responsible gaming monitoring and dispute resolution
Technical / analytics data	Up to 24 months (anonymised thereafter)	Platform performance and fraud detection
Marketing consent records	Duration of consent + 3 years	Evidence of lawful marketing basis

After the applicable retention period expires, personal data is securely and permanently deleted from our systems or irreversibly anonymised so that it can no longer be associated with an identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical and business analysis purposes.

10. Your Rights

As a player on the nnoko platform, you have the following rights in relation to the personal data we hold about you:

• Right of Access: You may request a copy of all personal data nnoko holds about you. We will provide this within 30 days of receiving a valid request.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that we correct it. You may update some information (such as your email address or mobile number) directly within your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request that nnoko delete your personal data. This right is subject to our legal obligations — we may be required to retain certain data (particularly financial records and KYC documents) for the mandatory periods set out in Section 9 even after your account is closed.
• Right to Restrict Processing: You may ask nnoko to suspend processing of your data in specific circumstances — for example, while you contest the accuracy of data we hold, or while we are investigating a complaint you have raised.
• Right to Data Portability: You may request a copy of data you have provided to nnoko in a structured, commonly used, machine-readable format (e.g., CSV). This right applies to data processed on the basis of your consent or a contract with you.
• Right to Object: You may object at any time to processing of your personal data for direct marketing purposes. You also have the right to object to processing carried out on the basis of legitimate interests, though nnoko may continue processing where we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

To exercise any of these rights, please contact us at [email protected] or via the 24/7 live chat on the Platform. We will verify your identity before processing any data rights request to ensure the security of your account. We aim to respond to all requests within 30 days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days and will notify you accordingly.

11. Marketing Communications

nnoko may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, cricket betting promotions, seasonal offers (such as Eid or Pohela Boishakh specials), and other relevant campaigns — but only where you have given your explicit consent to receive such communications at the time of registration or through your account settings.

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link included in any promotional email.
• Updating your notification preferences in your nnoko account settings.
• Contacting our support team at [email protected] or via live chat and requesting to be removed from marketing lists.

Please note that opting out of marketing communications does not prevent you from receiving transactional messages that are necessary for the operation of your account — such as deposit confirmations, withdrawal notifications, password reset emails, and security alerts. These communications are essential to your account and cannot be disabled.

12. Children & Minors

The nnoko platform is strictly for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from any individual under the age of 21. If we become aware that a person under 21 has registered an account or provided personal data, we will immediately close the account, delete all associated data, and void any transactions that occurred on the account.

If you are a parent or guardian and you believe a minor has registered an account on nnoko, please contact us immediately at [email protected] so we can take appropriate action without delay.

13. Third-Party Links

The nnoko platform may contain references to game providers and payment partners. While we take care in selecting the third parties we work with, nnoko does not control the privacy practices of external organisations. If you access any third-party service through our platform — including game providers such as Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi, or payment platforms such as bKash, Nagad, or Rocket — their own privacy policies will govern how they handle your data. We encourage you to review the privacy policy of any third-party service you interact with.

nnoko accepts no responsibility or liability for the privacy practices of any third-party website or service that you access independently or that is linked from our platform.

14. Changes to This Privacy Policy

nnoko reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When we make material changes to this policy, we will:

• Update the "Last Updated" date shown at the top of this page.
• Display a prominent notice on the nnoko platform informing players of the change.
• Where the change significantly affects how we process your personal data, send a direct notification to your registered email address at least 14 days before the change takes effect.

Your continued use of the nnoko platform after any changes to this Privacy Policy have taken effect constitutes your acceptance of the updated terms. If you do not agree with a change, you should cease using the Platform and may request account closure by contacting our support team.

We recommend that you review this Privacy Policy periodically to stay informed about how nnoko protects your personal data. The most current version of the Privacy Policy is always accessible at https://nnoko.io/privacy-policy.

15. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or about how nnoko handles your personal data, please reach out to our support team:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 in English directly on the nnoko platform.
• Response time: We aim to acknowledge all privacy-related enquiries within 24 hours and provide a full response within 30 days (Bangladesh Standard Time, UTC+6).