nnko Privacy Policy — How We Protect and Handle Your Personal Data

Introduction and Scope

This Privacy Policy describes how nnko collects, uses, stores, and discloses personal data in connection with the operation of the nnko online betting and casino platform at nnko.bio. It applies to all registered users, prospective users, and visitors to the nnko website, regardless of the device or network through which they access the platform.

nnko is committed to handling personal data responsibly and transparently. This Policy is written in plain English to ensure that every player in Bangladesh can understand exactly how their information is managed. By accessing nnko or registering an account, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

This Privacy Policy should be read alongside the nnko Terms & Conditions, which govern your overall use of the platform. In the event of any conflict between this Policy and the Terms & Conditions on a data-related matter, this Privacy Policy will prevail.

Data We Collect

nnko collects personal data through several channels: directly from you when you register an account, use the platform, or contact our support team; automatically through your use of the website; and from third-party verification and payment service providers where necessary for account operation. The categories of data we collect are as follows:

nnko does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data (other than responsible gaming disclosures you voluntarily provide), or biometric data. We do not collect data about minors — individuals under the age of 21 must not register on or use the nnko platform.

How We Use Your Data

nnko uses the personal data we collect for the following specific purposes. We will not use your data for any purpose that is incompatible with those listed here without first obtaining your explicit consent:

• Account creation and management: To register your account, verify your identity, maintain your player profile, and provide you with access to all nnko platform features including cricket betting, live casino, and slots.
• Payment processing: To process deposits and withdrawals via your registered payment method (bKash, Nagad, Rocket, Upay, or bank transfer), verify payment ownership, and maintain accurate financial records for your account.
• Legal and regulatory compliance: To satisfy our obligations under applicable law including anti-money laundering (AML) checks, know-your-customer (KYC) verification, and age verification requirements.
• Responsible gaming: To monitor betting patterns that may indicate problem gambling behaviour, to apply deposit limits, cooling-off periods, or self-exclusion measures you have requested, and to contact you if our systems identify a concern.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, and unauthorised access attempts on the nnko platform.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance in relation to your account or transactions.
• Platform improvement: To analyse aggregated, anonymised usage data to improve platform performance, fix technical issues, and develop new features that better serve Bangladeshi players.
• Marketing communications: Where you have given explicit consent, to send you information about promotions, bonuses, and seasonal offers (such as BPL cricket season promotions or Eid special offers) via SMS or email. You may withdraw this consent at any time.

Legal Basis for Processing

nnko processes your personal data on the following legal bases, each of which applies to the specific processing activities described in this Policy:

• Contractual necessity: Processing that is necessary to perform the contract between you and nnko — i.e., to operate your account, process your transactions, and deliver the services you have registered to receive.
• Legal obligation: Processing that nnko is required to carry out to comply with applicable laws, including AML regulations, KYC requirements, and financial record-keeping obligations.
• Legitimate interests: Processing carried out in furtherance of nnko's legitimate business interests — such as fraud detection, platform security, and aggregate analytics — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing activities that require your explicit consent, primarily direct marketing communications. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal.

Data Sharing and Disclosure

nnko does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the following circumstances, and only to the minimum extent necessary for the stated purpose:

• Payment service providers: We share necessary financial and identity data with bKash, Nagad, Rocket, Upay, and partner banks (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) solely to process your transactions. These providers are bound by their own strict data protection obligations.
• Game technology providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session data necessary to operate their games within the nnko platform. No contact or financial data is shared with game providers beyond what is technically required.
• Identity verification services: Where required to complete KYC checks, we may share identity documents with accredited verification service providers operating under strict confidentiality agreements.
• Law enforcement and regulators: nnko will disclose personal data to competent authorities where required to do so by a lawful order, court direction, or applicable statutory obligation. We will notify affected users where permitted by law before making such a disclosure.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of nnko's assets, player data may be transferred to the successor entity, subject to equivalent privacy protections. Affected users will be notified before their data is transferred.

International Data Transfers

nnko's primary data infrastructure is located to serve the Bangladesh market. Where operational necessity requires personal data to be transferred to or accessed from locations outside Bangladesh — for example, by internationally hosted game providers or cloud infrastructure providers — nnko ensures that appropriate safeguards are in place before any such transfer occurs.

These safeguards may include contractual clauses that impose data protection obligations on the recipient party, technical and organisational security measures equivalent to those applied within our own infrastructure, and ongoing monitoring of third-party compliance. If you would like information about the specific safeguards applicable to any particular international transfer, please contact us at [email protected].

Data Retention

nnko retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention principles apply:

• Active accounts: Personal data associated with an active nnko account is retained for the duration of the account's existence plus a minimum post-closure period required for legal and regulatory compliance.
• Financial records: Transaction records, deposit history, and withdrawal records are retained for a minimum of five years from the date of the transaction in accordance with financial record-keeping requirements applicable to online platforms operating in Bangladesh.
• KYC and identity documents: Identity verification documents are retained for a minimum of five years from the date of verification, or longer where required by applicable AML regulations.
• Support correspondence: Customer support communications are retained for three years from the date of the last interaction in the relevant support thread.
• Marketing consent records: Records of marketing consent (or withdrawal of consent) are retained for the duration of your account and for three years thereafter, to evidence compliance with consent obligations.
• Anonymised analytics data: Aggregated, anonymised usage data that cannot be used to identify any individual may be retained indefinitely for platform improvement purposes.

When data is no longer required for the purposes described above, nnko will securely delete or anonymise it. Where deletion is not immediately practicable (for example, due to backup schedules), the data will be isolated from active processing until deletion can be completed.

Cookies and Tracking Technologies

nnko uses cookies and similar technologies (including local storage and session tokens) on the nnko.bio platform. These technologies serve the following specific purposes:

• Essential cookies: Required for the platform to function correctly. These include authentication tokens that keep you logged in during your session, CSRF protection tokens, and session state cookies. Essential cookies cannot be disabled without breaking core platform functionality.
• Preference cookies: Used to remember your platform settings such as display preferences and notification choices. These cookies improve your experience on return visits.
• Analytics cookies: Used to collect aggregated, anonymised data about how players interact with the nnko platform — such as which pages are visited most frequently and where users encounter technical issues. This data is used solely to improve platform quality. nnko does not use Google Analytics or similar third-party analytics services that share your data with external advertising ecosystems.

nnko does not use advertising cookies, behavioural tracking cookies, or any tracking technology that profiles you for the purpose of serving targeted advertisements. You may manage cookie preferences through your browser settings. Disabling essential cookies will impair your ability to use the nnko platform.

Your Rights as a Data Subject

As a registered nnko player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all valid requests within 30 calendar days of receipt. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension before the initial deadline expires.

• Right of access: You have the right to request a copy of the personal data nnko holds about you and information about how it is being used. This is sometimes called a Subject Access Request (SAR).
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update basic account information directly through your account settings.
• Right to erasure: You have the right to request that nnko delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing is unlawful. This right is subject to legal retention obligations that may require us to retain certain data even after an erasure request.
• Right to restrict processing: In certain circumstances, you have the right to request that nnko restrict the processing of your personal data — for example, while a dispute about the accuracy of the data is being resolved.
• Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including direct marketing. Where you object to direct marketing, we will cease processing your data for that purpose immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Children and Minors

The nnko platform is strictly intended for adults aged 21 and above. nnko does not knowingly collect personal data from individuals under the age of 21. If we become aware that a registered account belongs to a person under 21, we will immediately suspend the account, delete all associated personal data to the extent permitted by law, and forfeit any balances held on the account.

If you have reason to believe that a person under the age of 21 has registered an nnko account, please contact us immediately at [email protected] so that we can investigate and take appropriate action. We take the protection of young people seriously and maintain active age verification systems to prevent underage access.

Security Measures

nnko employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the nnko platform.
• Password hashing using bcrypt or equivalent algorithms — your password is never stored in plain text and is never accessible to nnko staff.
• Two-factor authentication options for account login, adding an additional layer of protection beyond your password.
• Access controls limiting nnko staff access to personal data on a strict need-to-know basis, with full audit logging of all access events.
• Regular security reviews of platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Encrypted data storage for sensitive fields including identity documents, payment account numbers, and verification records.

While nnko takes all reasonable precautions to protect your personal data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, nnko will notify affected users without undue delay and will take immediate steps to contain and remediate the breach.

Changes to This Privacy Policy

nnko reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. The revised Policy will be published on this page with an updated effective date.

Where a change is material — meaning it significantly affects your rights, the categories of data we collect, the purposes for which we use it, or the parties with whom we share it — nnko will notify registered players via the mobile number or email address held on their account before the change takes effect. For minor or clarificatory changes, publication on this page with an updated date will constitute sufficient notice.

Your continued use of the nnko platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should cease using the platform and close your account by contacting support at [email protected].

We encourage you to review this Privacy Policy periodically to stay informed about how nnko is protecting your personal data. This Policy was last updated on 1 January 2026.