nnok Privacy Policy

Section 1

Introduction & Scope

This Privacy Policy applies to all personal data collected and processed by nnok in connection with the nnok platform at nnok.bar, including all betting, casino, account management, and customer support services provided through that domain.

This Policy applies to all individuals who access or use the nnok platform, regardless of whether they have completed the account registration process. By continuing to use the nnok platform, you acknowledge that you have read and understood this Privacy Policy.

This Policy should be read alongside nnok's Terms & Conditions and Responsible Gaming Policy, all of which together form the complete framework governing your relationship with nnok as a registered player.

Section 2

Data We Collect

nnok collects personal data across several categories depending on the nature of your interaction with the platform. The table below summarises the main data categories, specific data points collected, and the context in which each is gathered:

nnok does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data unrelated to responsible gaming, or biometric data beyond that strictly required for KYC identity verification under applicable anti-money laundering obligations.

Section 3

How We Use Your Data

nnok uses the personal data it collects exclusively for the following operational and compliance purposes:

• Account management: Creating, maintaining, and securing your nnok player account, including authentication and two-factor verification processes.
• Service delivery: Enabling you to place bets, play casino games, deposit and withdraw funds, and access all platform features for which your account is eligible.
• Identity verification and KYC: Verifying your identity and age (21+) in compliance with anti-money laundering (AML) obligations and responsible gaming requirements. This includes processing documents submitted during KYC to confirm the accuracy of registration information.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank transfer channels, and maintaining records of all financial transactions as required by applicable law.
• Fraud prevention and security: Detecting and investigating suspicious activity, preventing the creation of duplicate accounts, identifying potential collusion, and protecting the integrity of the nnok platform for all players.
• Customer support: Responding to account queries, technical issues, complaints, and responsible gaming requests submitted via live chat, WhatsApp, or email.
• Responsible gaming enforcement: Monitoring account activity to support self-imposed limits, identifying patterns that may indicate problem gambling, and enforcing self-exclusion requests promptly and completely.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with the platform and to improve game selection, site navigation, and support response quality.
• Legal and regulatory compliance: Retaining records as required by applicable anti-money laundering legislation, responding to lawful requests from public authorities, and maintaining audit trails for regulatory purposes.
• Communications: Sending transactional communications (deposit confirmations, withdrawal notifications, account security alerts) and, where you have opted in, promotional communications about relevant nnok offers. You may opt out of promotional communications at any time by contacting [email protected].

Section 4

Legal Basis for Processing

Every instance of personal data processing carried out by nnok rests on one of the following legal bases:

• Contractual necessity: Processing that is necessary to fulfil the contractual obligations nnok has toward you as a registered player — including account creation, bet settlement, payment processing, and customer support. Without this processing, nnok cannot provide the service you have registered for.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering regulations, KYC requirements, and record-keeping obligations. nnok has no discretion over whether to carry out this processing.
• Legitimate interests: Processing carried out in pursuit of nnok's legitimate business interests where those interests are not overridden by your privacy rights. This includes fraud detection, platform security monitoring, and aggregated analytics for service improvement.
• Consent: Processing activities for which nnok has obtained your explicit, freely given, and informed consent — primarily the sending of promotional marketing communications. Where consent is the legal basis, you may withdraw it at any time without affecting the legality of processing carried out before withdrawal.

Where nnok relies on legitimate interests as the legal basis for a particular processing activity, a balancing assessment is conducted to confirm that the processing does not disproportionately interfere with your privacy rights. The outcome of such assessments is available on request by contacting [email protected].

Section 5

Data Sharing & Disclosure

nnok does not sell your personal data. We share personal data with third parties only in the following limited circumstances, and only to the minimum extent necessary:

• Payment service providers: Transaction data is shared with the payment processing partners that facilitate your deposits and withdrawals — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and City Bank. These providers receive only the data necessary to execute and confirm the relevant transaction. Each provider operates under its own privacy terms, which you are encouraged to review.
• KYC and identity verification providers: Where nnok uses a third-party identity verification service to process KYC documents, that provider receives only the identity data necessary to complete the verification. All such providers are bound by confidentiality and data processing agreements with nnok.
• Game software providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a player session token and anonymised session data necessary to operate their game software within the nnok platform. These providers do not receive your full identity profile.
• Fraud prevention and AML services: nnok may share data with specialised fraud detection and anti-money laundering screening services where there is a specific, documented reason to do so in connection with a suspected violation of applicable law or these Terms.
• Legal and regulatory authorities: nnok will disclose personal data to public authorities, law enforcement agencies, or courts where required to do so by applicable law or by a valid legal order. nnok will notify you of such disclosure where legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or a material part of nnok's business assets, player data may be transferred to the acquiring entity. You will be notified of any such transfer and the acquiring entity will be required to honour this Privacy Policy.

All third-party processors engaged by nnok are bound by written data processing agreements that prohibit them from using your data for any purpose beyond the specific service they are contracted to provide for nnok.

Section 6

Cookies & Tracking

The nnok platform uses cookies and similar tracking technologies to maintain session continuity, support security features, and gather anonymised analytics data. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during a visit and security tokens that protect your account from cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without preventing basic platform functionality.
• Functional cookies: Store your preferences such as language settings, preferred payment method, and responsible gaming display preferences so that these settings persist across sessions.
• Analytics cookies: Collect anonymised data about how players navigate and use the nnok platform — including pages visited, time spent per section, and error events — to enable nnok to improve the user experience. This data is not linked to your personal identity.
• Security cookies: Help nnok detect and prevent fraudulent login attempts, identify unusual patterns of access, and enforce geographic or device-based access controls.

nnok does not use third-party advertising cookies or allow external advertisers to place cookies on the nnok platform. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from accessing your account.

Section 7

Data Retention

nnok retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention requirements imposed by applicable law. The following retention guidelines apply:

• Active account data: Identity, contact, and financial data associated with an active player account is retained for the full duration of the account's existence and for a period of five years following account closure, in accordance with standard AML record-keeping requirements.
• Transaction records: All records of financial transactions (deposits, withdrawals, bet placements, and settlements) are retained for a minimum of five years following the date of the transaction, regardless of account status.
• KYC documentation: Copies of identity documents submitted for KYC verification are retained for five years following account closure or the date of the last transaction, whichever is later.
• Customer support communications: Records of live chat, email, and WhatsApp support interactions are retained for three years following the date of the interaction, to support dispute resolution and quality assurance.
• Technical and usage data: Server logs and session data are retained for up to 12 months before being anonymised or deleted. Anonymised analytics data may be retained indefinitely as it no longer constitutes personal data.
• Self-exclusion records: Where a player has requested self-exclusion, a record of that request is retained indefinitely to prevent the player from re-registering during the exclusion period, even if the underlying account data has otherwise been deleted.

When personal data reaches the end of its applicable retention period, it is securely deleted or permanently anonymised in accordance with nnok's internal data lifecycle procedures.

Section 8

Data Security

nnok implements a layered approach to data security designed to protect player information against unauthorised access, loss, alteration, and disclosure. Key technical and organisational measures include:

• Transport encryption: All data transmitted between your browser and the nnok platform is encrypted using TLS 1.2 or higher. The nnok.bar domain operates exclusively over HTTPS.
• Data-at-rest encryption: Sensitive personal data stored on nnok servers — including identity documents, financial transaction records, and account credentials — is encrypted using AES-256 at the storage layer.
• Password hashing: Account passwords are never stored in plain text. nnok uses bcrypt hashing with an appropriate work factor to protect stored password hashes.
• Access controls: Access to player data within nnok's systems is restricted to personnel with a documented operational need. Access is governed by role-based access control (RBAC), enforced by multi-factor authentication for staff, and logged for audit purposes.
• Vulnerability management: nnok's platform undergoes regular security assessments and penetration testing. Identified vulnerabilities are triaged and remediated according to a documented severity-based timeline.
• Incident response: nnok maintains a documented data breach response procedure. In the event of a security incident that poses a material risk to player data, affected players will be notified promptly with details of the incident and the steps nnok is taking to contain and remediate it.

While nnok takes these measures seriously, no internet-based service can guarantee absolute security. Players are encouraged to use strong, unique passwords for their nnok accounts, enable two-factor authentication, and contact support immediately if they suspect any unauthorised account activity.

Section 9

Your Rights

As a player whose personal data is processed by nnok, you hold the following rights in relation to that data. To exercise any of these rights, contact nnok at [email protected] with the subject line "Data Rights Request" and your registered account username:

• Right of access: You may request a copy of the personal data nnok holds about you, together with information about how that data is being used. nnok will respond to verified access requests within 30 days.
• Right to rectification: If personal data nnok holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For identity data, supporting documentation may be required.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (where consent was the legal basis), or where processing was unlawful. This right is subject to legal retention obligations — for example, nnok cannot delete transaction records that are required by anti-money laundering law.
• Right to restriction: You may request that nnok restricts the processing of your data in certain circumstances — for example, while the accuracy of data is being disputed, or while an objection to processing is being assessed.
• Right to data portability: Where processing is based on your consent or on contractual necessity, and where processing is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests. nnok will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where consent is the legal basis for a processing activity (primarily marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

nnok will acknowledge all rights requests within 5 business days and complete the request (or provide a reasoned explanation for any limitation) within 30 calendar days. There is no charge for exercising your rights in ordinary circumstances.

Section 10

Children & Minors

The nnok platform is strictly restricted to adults aged 21 years and above. nnok does not knowingly collect personal data from any individual under the age of 21. The platform's registration process includes an age declaration step, and KYC verification is used to confirm age where required.

If nnok becomes aware that personal data has been collected from an individual who is under the age of 21 — whether through the registration process, a parental or guardian notification, or its own internal review — it will take the following immediate steps:

• Suspend the relevant account pending investigation;
• Delete all personal data associated with the underage individual, except where retention is required by law;
• Refund any deposited principal to the originating payment method after verification;
• Void all wagers and winnings associated with the account.

Parents or guardians who believe that a minor under their care may have accessed the nnok platform are urged to contact nnok immediately at [email protected]. nnok will treat all such notifications as urgent and respond within one business day.

Section 11

Policy Updates

nnok reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, business operations, or the technical means by which data is processed. The date of the most recent revision is always displayed at the top of this page.

Where a change to this Policy is material — meaning it significantly affects the rights of registered players or the ways in which their data is used — nnok will provide at least 14 days' advance notice by sending an email to the address registered to each affected account and by displaying a prominent notice on the nnok platform.

Non-material updates — such as corrections to typographic errors, clarifications that do not alter the substance of the Policy, or updates to contact details — may be made without prior notice. The revised Policy takes effect from the date displayed in the "Last Updated" badge at the top of the legal text.

Continued use of the nnok platform following the effective date of a revised Privacy Policy constitutes your acknowledgement and acceptance of the changes. If you do not accept the revised Policy, you should contact nnok to close your account before the effective date.

Section 12

Contact & Complaints

If you have questions, concerns, or complaints about the way nnok collects or handles your personal data, or if you wish to exercise any of the rights described in Section 9, please contact nnok's data support team using the following details:

• Email: [email protected] (subject line: "Privacy Enquiry" or "Data Rights Request")
• Live Chat: Available 24/7 on the nnok platform
• Response time: nnok aims to acknowledge all privacy-related contacts within 5 business days and to resolve them within 30 calendar days.

nnok takes all privacy complaints seriously and will investigate each one fairly and thoroughly. Where a complaint cannot be resolved to your satisfaction through nnok's internal process, you have the right to escalate the matter to the relevant supervisory authority or data protection regulator in your jurisdiction.

This Privacy Policy was last reviewed and updated in January 2026. nnok is committed to maintaining its accuracy and to notifying players of any material changes in a timely manner.