son101 Privacy Policy

This Privacy Policy ("Policy") describes how son101 ("son101", "we", "us", "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you", "User", "Player") who access or use the son101 online gaming platform available at https://son101.ws (the "Platform").

son101 is committed to handling your personal data with transparency, integrity, and in accordance with internationally recognised data protection principles. We collect only the data that is necessary for the lawful operation of our Platform, and we do not sell your personal information to third parties for their own marketing purposes.

By registering an account, accessing the Platform, or using any of our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should refrain from using the Platform.

This Policy applies to all players accessing son101 from Bangladesh, including players located in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. This Policy should be read in conjunction with our Terms & Conditions, which are incorporated by reference.

We may update this Policy from time to time to reflect changes in our data practices or applicable law. Material updates will be communicated via the email address associated with your account or through a prominent notice on the Platform. The date of the most recent revision is shown at the top of this document.

son101 collects personal data in several ways: directly from you when you register or use the Platform, automatically through your interaction with our services, and in limited circumstances from third-party sources such as payment processors and identity verification providers. The categories of personal data we collect include:

Where you choose not to provide personal data that is required for a specific purpose (for example, identity verification documents required for KYC compliance), we may be unable to provide the relevant service, including processing withdrawal requests.

son101 may share your personal data with carefully selected third parties only where necessary for the lawful purposes described in this Policy. The categories of recipients with whom we may share your data include:

• Payment Service Providers: Including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, Mastercard, and other authorised payment partners, for the purpose of processing your deposits and withdrawal requests. These providers receive only the data necessary to complete the relevant transaction.
• Identity Verification Providers: Third-party KYC and AML service providers who assist son101 in verifying player identity, age, and source of funds in accordance with our compliance obligations.
• Game Technology Providers: Software providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (such as a player session token) that is necessary to deliver their games on the son101 Platform. These providers do not receive your full identity data.
• IT and Security Service Providers: Cloud hosting, content delivery, and cybersecurity vendors who support the infrastructure of the son101 Platform. These providers act as data processors under contract and are bound by strict confidentiality and data protection obligations.
• Regulatory and Law Enforcement Authorities: son101 may disclose personal data to governmental, regulatory, or law enforcement authorities where required by applicable law, court order, or regulatory directive. We will notify you of such disclosures where legally permitted to do so.
• Fraud Prevention Agencies: Where son101 has reasonable grounds to suspect fraudulent activity, money laundering, or other illegal conduct, we may share relevant data with fraud prevention agencies and financial intelligence bodies.

All third-party service providers are required to implement appropriate technical and organisational security measures and are contractually prohibited from using your personal data for any purpose beyond the specific service they provide to son101.

son101 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected or to comply with applicable legal, regulatory, and contractual obligations. Our general retention periods are as follows:

• Account and identity data: Retained for the duration of your account relationship with son101 and for a minimum of five (5) years following account closure, in accordance with applicable AML and financial record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, as required by financial regulations applicable to payment processing and anti-money laundering compliance.
• Gaming and wagering records: Retained for a minimum of three (3) years to support dispute resolution, responsible gaming monitoring, and regulatory reporting obligations.
• Customer support communications: Retained for a minimum of two (2) years from the date of the interaction for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for the duration of your consent and for a reasonable period thereafter to demonstrate compliance with consent obligations.
• Technical and log data: Generally retained for twelve (12) months, subject to shorter periods where the data is used only for real-time security monitoring.

Following the expiry of the applicable retention period, your personal data will be securely deleted or anonymised such that it can no longer be attributed to you as an identifiable individual. Where complete deletion is not immediately possible due to technical constraints (for example, data held in backup systems), the data will be isolated and protected from further active processing until deletion is feasible.

son101 uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the Platform, enhance your experience, and gather analytical data about Platform usage. A cookie is a small text file placed on your device by a web server when you visit a website. Cookies do not contain executable code and cannot access other information stored on your device.

The types of cookies son101 uses are described below:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core features such as secure login sessions, account authentication, and fraud prevention. You cannot opt out of strictly necessary cookies while using the Platform.
• Performance Cookies: These cookies collect anonymised information about how visitors use the Platform, such as which pages are visited most frequently and whether error messages are encountered. This data helps son101 improve Platform performance and reliability.
• Functionality Cookies: These cookies remember your preferences (such as your preferred language settings, responsible gaming preferences, and display options) so that you do not need to re-enter them on each visit.
• Analytics Cookies: son101 uses analytics tools to understand aggregate player behaviour patterns. Data collected via analytics cookies is anonymised before analysis and is not used to identify individual players.

You may control cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality and performance of the Platform. For detailed guidance on managing cookies in your specific browser, please refer to your browser's help documentation.

As a user of the son101 Platform, you hold the following rights with respect to your personal data. These rights are subject to certain limitations and exceptions as permitted by applicable law:

• Right of Access: You have the right to request a copy of the personal data son101 holds about you, together with information about how that data is processed.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by son101 be corrected or completed without undue delay.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to son101's legal retention obligations. Please note that we may be required by law to retain certain data (particularly financial and identity records) for a specified period even following a deletion request.
• Right to Restrict Processing: You have the right to request that son101 restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to son101 in a structured, commonly used, machine-readable format, where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on son101's legitimate interests, though son101 may be entitled to continue such processing where it can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where son101's processing of your personal data is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

son101 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the son101 Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols, ensuring that your personal and financial information cannot be intercepted in transit.
• Encrypted Data Storage: Sensitive data — including passwords, payment information, and identity documents — is stored in encrypted form using strong cryptographic algorithms. Passwords are hashed and salted and are never stored in plaintext.
• Access Controls: Access to personal data within son101's systems is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Two-Factor Authentication: son101 supports two-factor authentication (2FA) on player accounts as an additional layer of protection against unauthorised access. Players are strongly encouraged to enable 2FA through their account security settings.
• Regular Security Audits: son101's systems and infrastructure undergo regular penetration testing and security audits conducted by qualified third-party security professionals.
• Incident Response: In the event of a personal data breach that poses a risk to your rights, son101 will notify affected players and relevant authorities within the timeframe required by applicable law.

While son101 implements robust security measures, no system can guarantee absolute security. You play an important role in protecting your account by choosing a strong, unique password, enabling two-factor authentication, and never sharing your login credentials with anyone.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way son101 handles your personal data, please contact our dedicated support team. We are committed to handling all privacy enquiries promptly and transparently.

Privacy Support Email: [email protected]
Response Time: Within 30 days of receipt (standard data rights requests)
Support Hours: 24/7, 365 days a year (Bangladesh Standard Time, UTC+6)

When submitting a data rights request, please include your full name, the email address associated with your son101 account, and a clear description of your request. We may ask you to provide proof of identity before processing your request in order to protect against unauthorised access to your data.