nonok Privacy Policy

01 Introduction

nonok ("we", "us", "our", "the Platform") operates nonok.io, an online betting and casino platform serving registered users in Bangladesh. As a responsible platform, we are committed to protecting the privacy and personal data of every user who interacts with our services.

This Privacy Policy describes the categories of personal data that nonok collects, the purposes for which that data is processed, the conditions under which it may be shared with third parties, the security measures we apply to protect it, and the rights available to you as a data subject. This policy applies to all data collected through nonok.io and any associated mobile-optimised interfaces.

We encourage you to read this document carefully alongside our Terms & Conditions and our Responsible Gaming policy, both of which contain provisions that interact directly with how your data is used on the nonok platform. Together, these three documents govern your full relationship with nonok as a registered user.

This policy was last reviewed and updated on 1 January 2026. The most current version of this policy is always available at nonok.io/privacy-policy. Where changes are material, we will notify registered users via their registered mobile number or email address prior to the updated policy taking effect.

02 Data We Collect

nonok collects personal data across several categories depending on the nature of your interaction with the platform. The following table provides a comprehensive overview of the data types we collect, the source of that data, and the context in which it is gathered:

nonok does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, or biometric data for identification purposes beyond what is required for age and identity verification under our KYC obligations.

We do not knowingly collect personal data from individuals under the age of 21. If we become aware that data belonging to a person under 21 has been submitted to the platform, we will immediately suspend the associated account and purge the data in question.

03 How We Use Your Data

nonok processes your personal data only for specific, defined purposes. We do not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your explicit consent:

• Account Creation and Management: To register your account, verify your identity, maintain your wallet balance, and manage your preferences and security settings.
• Transaction Processing: To facilitate deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to process withdrawal requests to your registered payment method.
• Service Delivery: To provide access to cricket betting markets, live dealer games, slots, E-Sports betting, and all other products available on the nonok platform.
• Customer Support: To respond to your enquiries, complaints, and requests submitted via live chat or email to [email protected], and to maintain a record of prior communications for quality and training purposes.
• Fraud Prevention and AML Compliance: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and any other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming Monitoring: To enforce self-set limits, time-outs, and self-exclusion requests, and to identify usage patterns that may indicate problem gambling behaviour in accordance with our Responsible Gaming policy.
• Platform Improvement: To analyse aggregate usage data, identify technical issues, and improve the overall user experience, game performance, and platform stability.
• Legal Compliance: To meet obligations imposed by applicable laws and regulations, including record-keeping requirements and responding to lawful requests from competent authorities.
• Promotional Communications: To send you information about bonuses, promotions, and seasonal offers that are relevant to your account — only where you have provided consent to receive such communications. You may withdraw this consent at any time by contacting our support team.

04 Legal Basis for Processing

Every processing activity carried out by nonok rests on one of the following recognised legal bases. Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal:

• Contractual Necessity: Processing your identity data, contact data, financial data, and account data is necessary to fulfil the contract between you and nonok — specifically, to provide you with access to the platform, process your transactions, and maintain your account.
• Legal Obligation: Certain processing activities — particularly those related to anti-money laundering checks, identity verification, and record retention — are required by applicable legal and regulatory obligations and cannot be waived by user preference.
• Legitimate Interests: Processing for fraud detection, platform security, analytics, and service improvement is carried out on the basis of nonok's legitimate interests in operating a secure and well-functioning platform, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications (promotional emails or SMS about bonuses and seasonal offers) is carried out only on the basis of your freely given, specific, informed, and unambiguous consent, collected at the time of registration or via a subsequent opt-in mechanism.

05 Data Sharing & Disclosure

nonok does not sell, rent, or trade your personal data to any third party. Data is shared only in the following limited and controlled circumstances:

• Payment Processors: Your financial data is shared with our integrated payment partners — bKash, Nagad, Rocket, Upay, and card processing networks — strictly to the extent necessary to process your requested transactions. Each payment partner operates under its own privacy policy and data processing agreement.
• Identity Verification Providers: Where KYC verification is required, your identity documents and associated data may be shared with a third-party identity verification service provider operating under contractual data protection obligations with nonok.
• Technology and Infrastructure Partners: Our platform is hosted and operated with the support of cloud infrastructure and software service providers. These providers are contractually bound to process data only on nonok's documented instructions and may not use your data for their own purposes.
• Game Content Providers: For live dealer games and slots powered by third-party studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), limited technical data — such as session identifiers — may be exchanged with the game provider's server to operate the game session. No personally identifiable information beyond what is technically required is shared with game studios.
• Legal and Regulatory Authorities: nonok may disclose your personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required by law, court order, or in connection with the investigation of fraud, money laundering, or other criminal activity.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of the assets of nonok, your personal data may be transferred to the acquiring entity, subject to the same privacy obligations described in this policy. You will be notified of any such transfer prior to your data becoming subject to a different privacy policy.

06 Cookies & Tracking Technologies

nonok uses cookies and similar tracking technologies on nonok.io to operate the platform efficiently, personalise your experience, and gather analytical data that helps us improve our services. The following types of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as user authentication, session management, and security token validation. The platform cannot function correctly without these cookies and they cannot be disabled.
• Functional Cookies: These cookies remember your preferences — such as your preferred language setting and display options — so that your experience is personalised across sessions. Disabling these cookies may affect certain personalisation features.
• Analytics Cookies: We use privacy-respecting analytics tools to understand how users navigate nonok.io, which pages are most visited, and where technical issues arise. This data is collected in aggregate form and is not linked to your personally identifiable account information.
• Security Cookies: These cookies support our fraud detection systems by identifying unusual patterns of behaviour, such as login attempts from unrecognised devices or IP addresses, that may indicate unauthorised access to your account.

You may control cookie behaviour through your browser settings. Most browsers allow you to block or delete cookies. However, blocking strictly necessary cookies will prevent you from logging in to your nonok account and accessing platform features. nonok does not use advertising cookies or cross-site tracking cookies for retargeting purposes.

07 Data Retention

nonok retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

When data reaches the end of its applicable retention period, it is securely deleted or anonymised so that it can no longer be linked to any individual. Anonymised aggregate data (such as statistical reports on platform usage) may be retained indefinitely as it contains no personally identifiable information.

08 Data Security

nonok takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and nonok.io is encrypted using 256-bit SSL/TLS protocols — the same standard used by major international financial institutions. This applies to all pages of the platform, including login, deposit, withdrawal, and account management pages.
• Password Security: Account passwords are processed using a one-way cryptographic hashing algorithm with per-user salts. Passwords are never stored in plain text and are never accessible to nonok staff.
• Payment Data Tokenisation: Your bKash, Nagad, Rocket, and Upay mobile wallet numbers are stored in tokenised form. Raw wallet account numbers are never retained in nonok's primary database after the initial payment transaction is processed.
• Access Controls: Access to personal data within nonok's systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required to perform their specific job functions. All internal data access is logged and auditable.
• Infrastructure Security: nonok's platform infrastructure is hosted in data centres that implement physical security controls, network-level firewall protection, intrusion detection systems, and regular independent security assessments.
• Incident Response: In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected users, nonok will notify affected users without undue delay and within a reasonable timeframe, providing details of the nature of the breach, the likely consequences, and the measures nonok has taken or proposes to take to address it.

09 Your Rights

As a registered user of the nonok platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact the nonok support team via live chat or by email at [email protected]:

• Right of Access: You have the right to request confirmation of whether nonok holds personal data about you, and to receive a copy of that data in a structured, commonly used format.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by nonok be corrected or completed without undue delay. You may update certain data fields (such as your email address or contact number) directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where it has been unlawfully processed. This right is subject to nonok's legal obligation to retain certain data categories for specified minimum periods as described in Section 7.
• Right to Restriction of Processing: You have the right to request that nonok restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, machine-readable format and to request that it be transmitted directly to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where that processing is carried out on the basis of legitimate interests. You also have an absolute right to object to processing for direct marketing purposes, which will be honoured immediately upon receipt of your objection.
• Right to Withdraw Consent: Where processing is based on your consent (for example, for promotional communications), you may withdraw that consent at any time by contacting the support team. Withdrawal of consent does not affect the lawfulness of any processing that took place before the withdrawal.

nonok will respond to all data rights requests within a reasonable timeframe. Where a request cannot be fulfilled — for example, because retention of the data is required by law — nonok will explain the reason in writing.

10 Children & Minors

nonok operates an absolute 21+ age policy. The platform is not directed at, and does not knowingly collect personal data from, any individual under the age of 21. All account registration attempts are subject to age verification controls.

If a parent or guardian believes that their child or a person under 21 in their care has created an account or submitted personal data to nonok without authorisation, they should contact the support team immediately at [email protected] or via live chat. Upon receiving a verified report, nonok will immediately suspend the account in question, delete all personal data associated with it, and refund any deposits made, subject to standard verification procedures.

Account holders are responsible for ensuring that minors do not gain access to their nonok account. nonok recommends that account holders use password managers, device-level parental controls, and other security measures to prevent unauthorised access by minors to their devices.

11 Third-Party Links

nonok.io does not include outbound links to third-party websites within its page content. However, the game content delivered by third-party studio providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) is operated through technology embedded within the nonok platform and subject to those providers' own privacy practices in respect of game-session data.

nonok is not responsible for the privacy practices or content of any third-party services that you may access independently of the nonok platform. We encourage you to read the privacy policy of any service you use outside of nonok.io.

12 Policy Amendments

nonok reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, a change to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — we will provide advance notice to registered users via the mobile number or email address registered to their account, at least seven (7) days prior to the changes taking effect.

For non-material changes, such as typographical corrections or clarification of existing provisions, nonok may update this policy without prior notice. The "Last Updated" date displayed at the top of this document and in the sidebar of this page will always reflect the most recent revision date.

Your continued use of the nonok platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the updated policy, you must discontinue your use of the platform and contact the support team to arrange account closure and data deletion.

13 Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or about the way in which nonok handles your personal data, please contact the nonok Data Support team through any of the following channels:

• Live Chat: Available directly on the nonok platform, 24 hours a day, 7 days a week. This is the fastest channel for privacy-related queries, with average first-response times under 5 minutes.
• Email: [email protected] — for formal written privacy requests including data access, rectification, erasure, or portability requests. Responses are provided within 2 to 5 business hours under standard conditions (Bangladesh Standard Time, UTC+6).

When submitting a formal data rights request by email, please include your registered username and the mobile number associated with your nonok account to allow us to locate your records promptly. nonok will acknowledge receipt of all formal requests within 48 hours and aim to provide a full substantive response within seven (7) business days.