mnok Privacy Policy — How We Handle Your Personal Data

1. Introduction

This Privacy Policy ("Policy") is issued by mnok ("the Platform", "we", "us", "our") and applies to all personal data collected from individuals ("you", "the User") who access, register on, or interact with the mnok website at https://mnok.io, including all associated betting, gaming, and account services.

mnok is committed to handling your personal information with transparency, integrity, and care. This Policy describes the categories of personal data we collect, the purposes for which that data is processed, the legal bases that justify our processing activities, the parties with whom data may be shared, and the rights you hold as a data subject. It should be read alongside the mnok Terms & Conditions and Responsible Gaming policy.

By registering a mnok account or continuing to use the platform after any update to this Policy, you acknowledge that you have read and understood its contents. Where your consent is required for a specific processing activity, it will be sought separately and explicitly. Consent may be withdrawn at any time by contacting [email protected], though withdrawal does not affect the lawfulness of processing carried out prior to that withdrawal.

2. Data We Collect

mnok collects personal data across several categories depending on how you interact with the platform. The following table summarises the main categories and the contexts in which they are gathered.

2.1 Data You Provide Directly

This includes all information submitted during the account registration process, KYC document uploads, deposit or withdrawal requests, bonus opt-in forms, and any communication you send to our support team. You are responsible for ensuring that any data you provide to mnok is accurate, current, and not misleading.

2.2 Data Collected Automatically

When you access the mnok platform, our systems automatically record certain technical and usage data. This includes your IP address, browser fingerprint, device identifiers, pages visited, games launched, bet amounts placed, and session timestamps. This data is used for security monitoring, fraud detection, and service improvement purposes and does not require any action on your part to generate.

2.3 Data from Payment Partners

When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a partner bank (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank), the relevant payment provider shares with mnok the transaction reference, amount, and mobile number or account identifier associated with that transaction. mnok does not receive or store your full banking PIN, bKash/Nagad passwords, or complete bank account credentials.

3. How We Use Your Data

mnok processes your personal data for the following clearly defined purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected.

• Account Creation and Management: To register your account, verify your identity and age (21+ requirement), maintain your account profile, and enable access to platform services.
• Payment Processing: To facilitate deposits and withdrawals in Bangladeshi Taka (BDT) via your chosen payment method, reconcile transaction records, and comply with financial reporting obligations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, money laundering, and other prohibited conduct as defined in the mnok Terms & Conditions.
• Regulatory Compliance: To fulfil Know Your Customer (KYC) obligations, maintain mandatory transaction records, and respond to lawful requests from competent authorities.
• Service Delivery and Personalisation: To provide sports betting markets, casino games, crash games, and promotional offers that are relevant to your activity and preferences on the platform.
• Responsible Gaming: To monitor betting patterns that may indicate problem gambling behaviour, to administer self-exclusion and deposit limit requests, and to communicate responsible gaming resources to at-risk players.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and maintain records of support interactions for quality assurance purposes.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve website performance, enhance game selection, and optimise the user experience for players across Bangladesh.
• Direct Communications: To send you transactional notifications (deposit confirmations, withdrawal approvals, security alerts) and, where you have opted in, promotional communications about relevant mnok offers.

4. Legal Basis for Processing

Every data processing activity conducted by mnok rests on one of the following recognised legal bases:

• Contractual Necessity: Processing your identity, contact, and financial data is necessary for mnok to perform its obligations under the Terms & Conditions you accepted at registration — including account creation, payment processing, and game access.
• Legal Obligation: Retaining KYC documents, transaction records, and certain communications is required to comply with applicable anti-money-laundering, counter-fraud, and financial record-keeping obligations.
• Legitimate Interests: Processing technical and usage data for fraud prevention, platform security, and service improvement is justified by mnok's legitimate interest in operating a safe, fair, and commercially viable betting platform.
• Consent: Where mnok sends you optional promotional communications or uses non-essential cookies for analytics, it does so only with your prior explicit consent. Consent may be withdrawn at any time.

5. Cookies & Tracking Technologies

The mnok website uses cookies and similar tracking technologies to maintain session state, enable platform functionality, detect security anomalies, and analyse aggregate usage patterns. The following categories of cookies are in use:

5.1 Strictly Necessary Cookies

These cookies are essential for the platform to function. They maintain your login session, remember your account preferences, and enable payment flows to operate correctly. These cookies cannot be disabled without rendering core platform features inoperable and do not require your consent to be placed.

5.2 Performance and Analytics Cookies

These cookies collect anonymised data about how users interact with the mnok platform — which pages are visited most frequently, how long sessions last, and where users encounter errors. This data is used exclusively to improve platform performance and is not linked to any identifiable individual. These cookies are placed only where you have provided consent.

5.3 Session and Security Cookies

Short-lived session cookies store a temporary encrypted token that authenticates your active login session. These cookies expire automatically when you close your browser or log out and are not used to track your activity across third-party websites.

6. Data Sharing and Disclosure

mnok does not sell, rent, or exchange your personal data with third parties for commercial purposes. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for each purpose.

6.1 Payment Service Providers

To process deposits and withdrawals, mnok shares the transaction amount and your account identifier with the relevant payment service provider (bKash, Nagad, Rocket, Upay, or partner bank). These providers are contractually obligated to process your data solely for payment purposes and are prohibited from using it for any other purpose.

6.2 Identity Verification Partners

Where mnok uses a third-party KYC service to verify the authenticity of identity documents submitted during account verification, your identity data and document images are shared with that service provider under a strict data processing agreement. Verification results are returned to mnok; original document images are not retained by the third-party provider beyond the verification window.

6.3 Game Content Providers

Licensed game providers (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi) receive a session token and anonymised player identifier to launch game sessions. These providers do not receive your full name, contact details, or financial data. Game session results and RNG data are transmitted back to mnok for bet settlement purposes.

6.4 Legal and Regulatory Disclosure

mnok may disclose personal data to law enforcement agencies, regulatory bodies, or courts where it is legally required to do so by a valid order, warrant, or statutory obligation. Where permitted by applicable law, mnok will attempt to notify the affected user of any such disclosure prior to it being made.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of the mnok business, personal data held by the platform may be transferred to the successor entity as part of that transaction. Affected users will be notified prior to any such transfer taking effect and will be provided with the opportunity to exercise their data rights before the transfer is completed.

7. International Data Transfers

As mnok is an internationally operated platform, personal data may be transferred to and stored on servers located outside Bangladesh. Where such transfers occur, mnok ensures that appropriate safeguards are in place to protect your data to a standard equivalent to, or exceeding, the protections described in this Policy. These safeguards may include contractual data transfer agreements with receiving parties, encryption in transit and at rest, and access controls that limit who within the receiving organisation may interact with the data.

By registering an account with mnok, you acknowledge that your personal data may be processed and stored outside Bangladesh. If you have concerns about specific data transfer arrangements, please contact [email protected] for further information.

8. Data Retention

mnok retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and Identity Data: Retained for a minimum of 5 years from the date of account closure to fulfil anti-money-laundering and KYC record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of 7 years from the date of each transaction in accordance with standard financial compliance requirements.
• Support Communications: Retained for 3 years from the date of the most recent interaction, unless the communication relates to an ongoing dispute or legal matter.
• Technical and Usage Logs: Retained for up to 13 months in an identifiable form; thereafter anonymised and retained for aggregated analytics purposes with no expiry.
• KYC Verification Documents: Retained for the duration of the active account relationship plus 5 years post-closure, subject to any ongoing legal hold.

When data is no longer required for any active purpose and the applicable retention period has expired, it is securely deleted or irreversibly anonymised using industry-standard data destruction methods.

9. Your Rights Over Your Personal Data

As a registered mnok user, you hold the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected] clearly identifying the right you wish to exercise and the specific data to which your request relates. mnok will respond within 30 calendar days.

• Right of Access: You may request a copy of all personal data that mnok holds about you, along with information about how it is being processed.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected or updated without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request that your personal data be deleted where it is no longer necessary for the purpose for which it was collected and where no legal obligation requires its retention.
• Right to Restrict Processing: You may request that mnok limit its processing of your personal data to storage only — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: You may request that personal data you have provided to mnok be delivered to you in a structured, machine-readable format, where technically feasible.
• Right to Object: You may object to processing carried out on the basis of legitimate interests at any time. mnok will cease such processing unless compelling legitimate grounds that override your interests can be demonstrated.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., promotional communications or non-essential analytics cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

10. Children's Privacy and the 21+ Rule

The mnok platform is strictly for individuals aged 21 years and above. mnok does not knowingly collect or process personal data belonging to individuals under the age of 21. Account registration is conditioned upon confirmation that the applicant meets the minimum age requirement, and all accounts are subject to age verification checks.

If mnok becomes aware that personal data has been collected from an individual who is under 21 years of age, that account will be immediately closed, all associated data will be scheduled for deletion, and any funds in the account will be handled in accordance with the platform's underage account procedures. If you believe that a minor has registered an account on the mnok platform, please report this immediately to [email protected].

11. Security Measures

mnok implements a layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, and destruction. Our current security measures include, but are not limited to, the following:

• 256-bit SSL/TLS encryption for all data in transit between your browser and our servers.
• AES-256 encryption at rest for sensitive fields including identity document images and payment identifiers.
• Role-based access controls (RBAC) limiting data access to personnel whose job function specifically requires it, with all access activity logged and reviewed.
• Multi-factor authentication (MFA) enforced for all internal staff accounts with access to production data systems.
• Regular automated vulnerability scanning and periodic manual penetration testing of public-facing platform components.
• 24/7 automated anomaly detection and alerting for unusual login patterns, high-value transaction spikes, and data access irregularities.
• Segregated database architecture separating financial records from user profile data to limit the blast radius of any potential security incident.

Despite these measures, no internet-based platform can guarantee absolute security. mnok encourages all users to use a strong, unique password for their account, enable any available two-factor authentication features, and report any suspicious account activity to [email protected] without delay.

12. Third-Party Links and Integrations

The mnok platform may display content, branding, or navigational references relating to our licensed game providers (e.g., Pragmatic Play, Evolution Gaming, Spribe). While these providers supply the game software that powers our casino and crash game categories, their own privacy practices are governed by their respective privacy frameworks and are separate from this Policy.

mnok is not responsible for the data practices of third-party game providers, payment processors, or any other external entity with which data is shared as described in Section 6 of this Policy. We encourage users to review the privacy policies of any third-party services they interact with directly, including bKash, Nagad, Rocket, and Upay, particularly when authorising payment transactions.

13. Updates to This Policy

mnok reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or operational circumstances. When material changes are made — particularly those that affect how your data is used or shared — mnok will notify registered users via their registered email address and will display a prominent notice on the platform homepage prior to the updated Policy taking effect.

The version of this Policy published at https://mnok.io/privacy-policy at any given moment is the operative version and supersedes all prior versions. The "Last Updated" date at the top of this page indicates when the current version entered into force. Your continued use of the mnok platform following the publication of a revised Policy constitutes your acceptance of its updated terms.

14. Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy, the way mnok handles your personal data, or the exercise of your data rights, please contact us using the details below. All communications should be in English and should clearly reference your registered account username or the email address associated with your account.

• Email (Data Enquiries): [email protected]
• Subject Line Format: "Privacy Enquiry — [Your Account Username]" or "Data Rights Request — [Your Account Username]"
• Response Commitment: Acknowledgement within 3 business days; full response within 30 calendar days.
• Operating Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6).

If you are dissatisfied with our response to a privacy complaint, you have the right to escalate your concern through appropriate legal channels in the jurisdiction applicable to your situation. mnok will cooperate fully with any lawful regulatory inquiry related to its data protection practices.