Reference

How sonawin Handles Your Personal Information

We collect only what we need to run your account, process your bKash, Nagad or Rocket transactions, and keep your wallet secure. This policy explains what data we hold, why we hold it, and how you can request changes or deletion.

bKash & Nagad DataAccount SecurityWallet PrivacyLive casino and slots
sonawin How sonawin Handles Your Personal Information
PRIVACY HELP CHANNELS

How to Reach Us About Your Data

If you have a question about what data we hold or want to make a request, we have three ways to connect. Our support team handles privacy queries with the same priority as payment issues — you do not need a separate form or department.

Live Chat Open the chat widget from any page on the site. Let the agent know your query is about personal data and they will route you to the privacy queue. Available around the clock, responses typically come within a few minutes.
Email Send your request to our support email address with the subject line 'Privacy Request' and your registered phone number. We aim to acknowledge within one working day and resolve most requests within a few days.
Account Settings Inside your account dashboard, the privacy section lets you view, download or request deletion of your stored data directly. Changes to contact details or linked wallet numbers can also be made here without contacting support.
DATA HANDLING PRACTICES

How We Protect and Manage Your Information

We take a layered approach to keeping your account and personal details safe. From encrypted connections to strict internal access controls, every step is built around the idea that your data belongs to you — we just look after it while your account is active.

Encrypted Connections

Every page on our platform loads over a secure connection. When you enter your bKash PIN or confirm a Nagad transfer, the data travels encrypted between your device and our servers so it cannot be intercepted in transit.

Cookie Management

We use session cookies to keep you logged in and analytics cookies to understand how pages perform. You can disable non-essential cookies through your browser. We never use cookies to track you across other websites.

Account Verification

Before processing a withdrawal to your Rocket or bKash wallet, we confirm the request matches your registered phone number. This extra check stops someone else from moving funds out of your account without your knowledge.

Data Retention

We keep your personal data only while your account remains open and for any additional period local regulation requires. Once that window closes after account deletion, we remove your records from active systems permanently.

Internal Access Controls

Only specific team members can view your full profile data, and every access is logged. Routine operations like deposit confirmations are handled by automated systems that do not expose your personal details to staff.

Your Right to Request Changes

You can ask us to correct inaccurate data, export a copy of everything we hold, or delete your account entirely.

Common Questions About Your Data at sonawin

Below are the questions we hear most often about how personal information is collected, used and protected on our platform. If your question is not covered here, reach out through any of the support channels above.

We collect your name, phone number, email address and the mobile wallet identifier you use for deposits (bKash, Nagad or Rocket account number). We also log your device type and IP address at registration for security purposes.

No. Your wallet PIN is entered directly into the bKash or Nagad app or USSD menu on your device. We never see, store or have access to that PIN — we only receive a transaction confirmation once the payment clears on the provider side.

Yes. Go to your account dashboard, open the privacy section and select the data export option. We will compile a file containing your profile details, transaction history and any communications on record, then notify you when it is ready to download.

After you request account closure, we retain your data for the period required by applicable regulation in your region. Once that mandatory window ends, your records are removed from active systems. We notify you by email when deletion is complete.

We share limited data with payment processors (bKash, Nagad, Rocket) to complete transactions, and with regulatory authorities where local law demands it. We do not sell or share your information with marketing partners or unrelated third parties.

Open your account settings and edit the field you want to change — name, email or phone number. For changes to your linked wallet number, you will need to verify ownership through an OTP sent to the new number before the update is confirmed.

We use session cookies to keep you logged in and performance cookies to measure page speed. You can disable non-essential cookies in your browser settings. Essential session cookies cannot be turned off without breaking the login flow.

Yes. The same encrypted connection protects you whether you open the site on a phone, tablet or desktop. We recommend keeping your device software updated and not sharing your login credentials to maintain that security on your end.

If we detect unauthorised access to personal data, we notify affected account holders by email and through in-app messages as quickly as possible. We also report the incident to relevant authorities where required by local law and outline steps you should take.

This privacy policy applies to every account holder who accesses our platform from an eligible region. Availability of our services depends on your local law — if you are accessing from a jurisdiction where the platform is not permitted, this policy does not create any right of access.