nnok Privacy Policy

Information We Collect

nnok collects personal information in the following categories: (a) Registration data — full name, date of birth, email address, and mobile number provided when creating an account; (b) Identity verification data — copies of government-issued identification and proof of date of birth collected as part of our KYC process; (c) Payment data — mobile wallet numbers (bKash, Nagad, Rocket, Upay) and transaction records necessary to process deposits and withdrawals in BDT; (d) Technical data — IP address, device type, browser type, session duration, and pages visited, collected automatically when you access the platform; (e) Communications data — records of correspondence between you and nnok support. We do not collect sensitive personal data such as biometric data, health information, or political opinions.

How We Use Your Information

nnok uses the personal information it collects for the following purposes: (a) Account management — to create, maintain, and administer your nnok account and verify your identity; (b) Service delivery — to provide access to games, betting markets, and payment services; (c) Payment processing — to facilitate deposits and withdrawals via bKash, Nagad, Rocket, and Upay; (d) Responsible gaming compliance — to monitor betting patterns, apply deposit limits, and action self-exclusion requests; (e) Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct; (f) Legal and regulatory compliance — to meet any applicable obligations under law; (g) Customer support — to respond to your queries, complaints, and requests; (h) Platform improvement — to analyse aggregated, anonymised usage data to improve our services. nnok will not use your personal information for any purpose not listed above without first obtaining your explicit consent.

Legal Basis for Processing

nnok processes your personal data on the following legal bases: (a) Contractual necessity — processing is required to perform the contract between you and nnok when you register an account and use the platform's services; (b) Legal obligation — processing is required to comply with applicable age verification, anti-money laundering, and responsible gaming obligations; (c) Legitimate interests — processing is necessary for fraud prevention, platform security, and the improvement of our services, provided these interests are not overridden by your rights; (d) Consent — where we rely on consent as the basis for processing (for example, for optional marketing communications), you may withdraw that consent at any time by contacting [email protected].

Data Sharing and Disclosure

nnok does not sell your personal information. We may share your data with the following categories of recipients strictly on a need-to-know basis: (a) Payment service providers — bKash, Nagad, Rocket, and Upay, solely to process your financial transactions; (b) Identity verification providers — third-party KYC service providers engaged to verify player age and identity; (c) Game providers — Pragmatic Play, Evolution Gaming, Spribe, and other game studios may receive limited technical data (such as player session tokens) required to deliver their games; (d) Legal and regulatory authorities — government bodies, law enforcement, or regulatory authorities where disclosure is required by applicable law or court order; (e) Professional advisers — legal, audit, and compliance professionals bound by professional confidentiality obligations. All third parties with whom nnok shares personal data are required to handle that data in a manner consistent with this Policy.

Data Retention

nnok retains personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable law. Specifically: (a) Account data is retained for the duration of your account and for a period of five years following account closure, in order to comply with financial record-keeping obligations; (b) Identity verification documents are retained for a minimum of five years from the date of submission; (c) Transaction records are retained for a minimum of five years from the date of each transaction; (d) Technical logs are retained for up to 12 months and then anonymised or deleted. When personal data is no longer required, nnok will securely delete or anonymise it in accordance with our internal data destruction procedures.

Your Rights

As an nnok account holder, you have the following rights in relation to your personal data: (a) Right of access — you may request a copy of the personal information nnok holds about you; (b) Right to rectification — you may request correction of inaccurate or incomplete personal data; (c) Right to erasure — subject to legal retention requirements, you may request deletion of your personal data; (d) Right to restrict processing — you may request that nnok limit how it uses your personal data in certain circumstances; (e) Right to data portability — you may request that your personal data be provided to you in a structured, machine-readable format; (f) Right to object — you may object to processing carried out on the basis of legitimate interests. To exercise any of these rights, contact nnok support at [email protected]. nnok will respond to all valid rights requests within 30 days.

Data Security Measures

nnok implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include: (a) SSL/TLS encryption for all data transmitted between your device and our servers; (b) Encrypted storage of sensitive personal data at rest; (c) Role-based access controls limiting staff access to personal data on a strict need-to-know basis; (d) Regular security audits and vulnerability assessments of our platform infrastructure; (e) Incident response procedures to address any security breaches promptly. While nnok takes all reasonable precautions, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights, nnok will notify affected account holders without undue delay.

International Data Transfers

nnok's platform and some of its third-party service providers (including certain game studios and KYC verification partners) may process or store personal data outside of Bangladesh. Where personal data is transferred internationally, nnok takes reasonable steps to ensure that the recipient provides an adequate level of protection for that data, including through contractual obligations that mirror the protections described in this Policy. By using the nnok platform, you acknowledge and consent to such international transfers where they are necessary for the delivery of the services described herein.

Marketing Communications

nnok may from time to time send you promotional communications about bonuses, new games, tournaments, and seasonal offers relevant to Bangladesh players (such as Eid specials or BPL promotions). We will only send marketing communications where you have provided consent, or where we have a legitimate interest in doing so under applicable law. You may opt out of marketing communications at any time by contacting [email protected] or by following the unsubscribe instructions in any marketing email. Opting out of marketing will not affect the delivery of transactional or account-related communications that are necessary for the operation of your account.

Third-Party Links

The nnok platform does not contain links to third-party websites or services. nnok is not responsible for the privacy practices of any third party, including game studios, payment providers, or any other external service. This Policy applies solely to personal data collected and processed by nnok in connection with your use of the nnok platform at nnok.vin. If you have concerns about how a third-party service provider handles your data, you should review their own privacy policy directly.