Privacy Policy — nnkk Online Casino

1. Information We Collect

nnkk collects personal data in the following categories, depending on how you interact with the platform:

1.1 Registration Data

When you create an nnkk account, we collect the following information directly from you:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify that you are aged 18 or above)
• Email address
• Mobile number registered in Bangladesh
• Preferred username and encrypted password
• Residential address (city, district, and country)

1.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations and to prevent fraud, we may request the following documents at any stage of your account lifecycle:

• Scanned copy or photograph of a valid government-issued photo ID (National ID card, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or similar document dated within the last three months)
• Proof of ownership of the payment method used for deposits (e.g., screenshot of bKash or Nagad account registration screen)
• Source-of-funds documentation for large withdrawals, where required under anti-money laundering (AML) procedures

1.3 Transaction and Payment Data

We record all financial transactions conducted through the nnkk platform, including:

• Deposit amounts, dates, and payment method identifiers (e.g., bKash wallet number, Nagad account, bank account suffix)
• Withdrawal requests, amounts, processing status, and destination payment account identifiers
• Bonus credits and wagering activity linked to promotional offers
• Transaction reference numbers issued by payment processors

nnkk does not store full card numbers, CVV codes, or complete banking credentials. Card transactions are processed by PCI DSS-compliant payment processors who handle sensitive financial data on our behalf.

1.4 Gameplay and Betting Data

To operate the platform, settle bets fairly, and investigate disputes, nnkk records:

• Game session logs (game name, provider, start time, end time, bet amounts, and outcomes)
• Sports betting selections, stakes, odds accepted, and settlement results
• Bonus wagering progress and completion records
• Responsible gaming interactions, including deposit limit settings, cool-off requests, and self-exclusion elections

1.5 Technical and Device Data

When you access nnkk via a web browser or mobile device, our servers automatically collect certain technical information:

• IP address and approximate geographic location (city-level)
• Device type, operating system version, and browser type
• Referring URL and exit page
• Session duration, pages viewed, and in-page interaction events
• Cookie identifiers and local storage values (see Section 5 for full cookie details)

1.6 Customer Support Communications

When you contact nnkk's support team via live chat or email, we retain a record of the conversation, including any documents, screenshots, or account information shared during the interaction. These records are used to resolve disputes, improve support quality, and maintain an audit trail.

2. How We Use Your Data

nnkk uses the personal data we collect for the following specific purposes:

3. Legal Basis for Processing

nnkk processes personal data only where a valid legal basis exists. The primary legal bases we rely upon are:

• Contractual necessity: Processing your registration data, transaction records, and gameplay logs is necessary to fulfil nnkk's contractual obligations to you as a registered player — including providing access to games, settling bets, and processing payments.
• Legal obligation: KYC verification, AML transaction monitoring, and fraud reporting are carried out because nnkk is legally required to do so under applicable financial crime prevention laws.
• Legitimate interests: Technical data collection for platform security, fraud detection, duplicate account identification, and service quality improvements is conducted on the basis of nnkk's legitimate business interests, provided those interests are not overridden by your fundamental rights.
• Consent: Sending marketing communications and placing non-essential cookies on your device is carried out only with your explicit, freely given, and revocable consent.

Where nnkk relies on legitimate interests as a legal basis, we carry out a balancing assessment to confirm that the processing does not disproportionately impact your privacy rights. You may request details of any legitimate interests assessment by contacting our support team.

4. Data Sharing & Disclosure

nnkk does not sell, rent, or otherwise trade your personal data. We share data with third parties only in the limited circumstances described below:

4.1 Game Studio and Technology Partners

To deliver games on the nnkk platform, we work with certified game studio partners including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These studios may receive session identifiers and anonymised gameplay logs necessary to render games and confirm bet outcomes. They do not receive your full name, payment details, or national ID information.

4.2 Payment Processors

When you make a deposit or request a withdrawal, nnkk passes the minimum required transaction data — including your registered mobile number or bank account identifier — to our payment processing partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and card network processors). Payment processors are contractually bound to use this data only for the purpose of completing the specific transaction.

4.3 Identity Verification Services

nnkk may use third-party identity verification services to automate document checking during KYC. These services process your submitted ID documents on our behalf and return a verification result. They are contractually prohibited from retaining your documents beyond the period required to complete the verification.

4.4 Legal and Regulatory Disclosure

nnkk will disclose personal data to law enforcement agencies, financial intelligence units, courts, or regulatory bodies where we are legally compelled to do so — for example, in response to a valid court order, search warrant, or statutory reporting obligation under applicable anti-money laundering regulations. Where permitted by law, nnkk will notify you of such a disclosure.

4.5 Business Transfers

In the event that nnkk undergoes a merger, acquisition, or sale of all or substantially all of its assets, player data may be transferred to the successor entity. You will be notified of any such transfer and the privacy practices of the acquiring entity prior to the transfer becoming effective.

5. Cookies & Tracking

nnkk uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform, maintain your login session, and understand how players use the site. The table below summarises the categories of cookies we use:

5.1 Managing Your Cookie Preferences

You can control non-essential cookies through your account's Privacy Settings panel. You may also configure your browser to block or delete cookies; however, blocking strictly necessary cookies will prevent you from logging in and using core platform features. For guidance on managing cookies in your specific browser, consult your browser's official help documentation.

5.2 Do Not Track

Some browsers transmit a "Do Not Track" (DNT) signal. nnkk currently does not alter its data collection practices in response to DNT signals, as there is no universally accepted standard for interpreting them. Players who wish to limit tracking should manage cookie preferences directly through our Privacy Settings panel.

6. Data Retention

nnkk retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are:

• Active account data (registration, gameplay, transaction records): Retained for the full duration of the account's active period plus a minimum of five (5) years following permanent account closure, to satisfy financial record-keeping and AML obligations.
• KYC documents (ID copies, proof of address): Retained for five (5) years after the last transaction associated with the account, in line with standard anti-money laundering retention requirements.
• Customer support records: Retained for three (3) years from the date of the last support interaction, unless the record relates to an open or pending dispute, in which case retention continues until final resolution.
• Marketing consent records: Retained for as long as the consent remains active, plus two (2) years after withdrawal of consent, to provide evidence of the original consent grant.
• Technical logs (server access logs, IP records): Retained for twelve (12) months and then securely deleted or anonymised.
• Anonymised analytics data: May be retained indefinitely, as it cannot be linked back to any individual player.

Where legal proceedings are in progress or reasonably anticipated, nnkk will preserve relevant data beyond the standard retention period until the matter is fully resolved.

7. Data Security

nnkk implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key measures include:

• Transport Layer Security: All communications between your device and nnkk servers are encrypted using TLS 1.3. Older TLS versions are not accepted.
• Password hashing: Account passwords are stored using a strong one-way hashing algorithm (bcrypt with a work factor calibrated to current hardware). Plain-text passwords are never stored.
• Access controls: Player personal data is accessible only to nnkk staff who have a legitimate operational need for it. All internal access is logged and subject to periodic review.
• Payment data isolation: Full card numbers and sensitive banking credentials are never stored on nnkk's servers. Payment processing is delegated to PCI DSS-certified processors.
• Infrastructure security: nnkk's servers are hosted in secure data centre facilities with physical access controls, 24/7 monitoring, and regular third-party penetration testing.
• Intrusion detection: Automated systems monitor for unusual login patterns, geographic anomalies, and large-volume data access events that may indicate a security incident.

7.1 Data Breach Response

In the event of a personal data breach that poses a risk to player rights and freedoms, nnkk will notify affected players without undue delay and, where legally required, report the breach to the relevant supervisory authority within 72 hours of becoming aware of it. Notifications will be sent to the email address registered on your account and will describe the nature of the breach, the data affected, and the steps nnkk is taking to address it.

8. Your Privacy Rights

As a player on the nnkk platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team via live chat or at [email protected]. We will respond to all valid requests within 30 days.

8.1 Right of Access

You have the right to request a copy of all personal data nnkk holds about you. We will provide this in a structured, commonly used format (typically PDF or JSON). For complex requests involving large volumes of data, we may extend the response period by a further 30 days, and we will inform you of this extension within the initial 30-day window.

8.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain information (such as your contact email) directly through your account settings. For corrections to identity documents or registered name, please contact support with the relevant supporting documentation.

8.3 Right to Erasure

You may request deletion of your personal data in circumstances where the data is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. Please note that nnkk's legal obligations — including AML record-keeping requirements — may mean that we are required to retain certain data categories even after a deletion request. We will clearly explain any such limitation in our response to your request.

8.4 Right to Restriction of Processing

You may request that nnkk restrict the processing of your personal data in specific circumstances — for example, while you contest the accuracy of the data, or while an objection to processing is being assessed. During a restriction period, your data will be stored but not actively used for any purpose beyond storage.

8.5 Right to Data Portability

Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a machine-readable format and to transmit it to another service provider. Contact support to request a data export.

8.6 Right to Object

You have the right to object at any time to processing of your personal data where nnkk relies on legitimate interests as the legal basis. If you object, nnkk will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms. You also have the absolute right to object to processing of your data for direct marketing purposes at any time, with no need to provide justification.

8.7 Right to Withdraw Consent

Where nnkk processes your data based on your consent (such as for marketing communications or analytics cookies), you may withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of any processing conducted prior to the withdrawal.

9. Children's Privacy

The nnkk platform is intended exclusively for adults aged 18 and above. nnkk does not knowingly collect, process, or retain personal data from any individual under the age of 18. Age verification is a mandatory step during account registration, and nnkk reserves the right to request government-issued photo ID from any player at any time to confirm their age.

If nnkk discovers that personal data has been collected from a player who was under 18 at the time of registration, the account will be suspended immediately, all associated data will be deleted or anonymised as quickly as possible (subject only to mandatory legal retention obligations), and any funds held in the account will be handled in accordance with applicable law.

If you are a parent or guardian and have reason to believe that your child has registered on the nnkk platform, please contact our support team immediately at [email protected]. We will investigate and act within 48 hours of receiving your report.

10. Changes to This Policy

nnkk reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal obligations, or platform features. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

Where changes are material — meaning they significantly affect how your data is collected, used, or shared — nnkk will provide at least seven (7) days' advance notice by sending a notification email to your registered email address and by displaying a prominent notice on the platform. You will have the opportunity to review the updated policy before it takes effect.

Non-material changes (such as typographical corrections, clarifications that do not alter the substance of a provision, or minor structural reorganisation) may be made without prior notice and will take effect upon publication.

Continued use of the nnkk platform after a revised Privacy Policy's effective date constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you should cease using the platform and contact support to request account closure.

11. Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a privacy concern, please contact nnkk's support team through one of the following channels:

• Live Chat: Available 24/7 directly on the nnkk platform (English language support)
• Email: [email protected] — please include "Privacy Request" in the subject line for prioritised handling
• Response time: Typically within 2 hours for general support queries; formal privacy rights requests receive a substantive response within 30 days (Bangladesh Standard Time, UTC+6)

When submitting a data request by email, please include your registered username or email address and a brief description of your request. nnkk may ask you to verify your identity before processing a data access, rectification, or erasure request, in order to protect your account from unauthorised third-party requests.