nnko Privacy Policy — Your Data, Our Responsibility

nnko operates the online gaming platform accessible at nnko.vu (the "Platform"). This Privacy Policy describes how nnko collects, uses, stores, and protects the personal information of individuals who register for or use the Platform. It applies to all users of nnko.vu regardless of the device used to access the Platform.

By creating an account on nnko or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal information as described herein. If you do not agree with this Privacy Policy, you must not use the Platform. This Privacy Policy should be read in conjunction with the nnko Terms and Conditions.

nnko collects the following categories of personal information from users of the Platform:

• Registration information: your mobile phone number, chosen username, and date of birth provided at the time of account creation. These are required to establish and verify your account.
• Identity verification documents: where required under our KYC obligations, copies of government-issued identity documents and proof of age may be requested and stored securely.
• Financial and transaction data: records of deposits, withdrawals, bet history, and payment method identifiers (such as bKash wallet numbers or masked card details) required to process transactions and detect financial crime.
• Technical and device data: IP address, device type, operating system version, mobile browser type, session timestamps, and geolocation data (where permitted) collected automatically when you access the Platform.
• Support and communications data: records of your support interactions with nnko, including chat logs and email correspondence, retained to resolve disputes and improve service quality.

nnko does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data beyond what is strictly necessary for age and identity verification.

nnko processes personal data only for specific, defined purposes. The primary uses of data collected on the Platform are:

• Account management: to create, maintain, and secure your account, authenticate your identity at login, and manage your session activity on the Platform.
• Transaction processing: to handle deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, maintain accurate financial records, and fulfil withdrawal requests within the applicable timeframes.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent transactions, account takeover attempts, money laundering, bonus abuse, and other prohibited conduct in accordance with our Terms and Conditions.
• Regulatory compliance: to meet our obligations under applicable laws including age verification, KYC, and anti-money-laundering requirements, and to cooperate with competent authorities where legally required.
• Service improvement and support: to respond to your support requests, resolve disputes, investigate complaints, and analyse aggregate, anonymised usage patterns to improve the Platform's performance and game offering.

nnko will not use your personal data for unsolicited direct marketing without your explicit consent. Where you have consented to receiving promotional communications, you may withdraw that consent at any time by contacting nnko support.

nnko processes your personal data on the following legal bases:

• Contractual necessity: processing that is required to perform the contract between you and nnko — specifically, to operate your account, process your transactions, and deliver the gaming and betting services you have registered to use.
• Legal obligation: processing necessary to comply with applicable laws and regulations, including age verification, anti-money-laundering checks, and cooperation with law enforcement or regulatory bodies when legally required.
• Legitimate interests: processing for fraud prevention, platform security, and the improvement of our services, where such interests are not overridden by your fundamental rights and freedoms as a data subject.

nnko does not sell, rent, or trade your personal information. nnko may share your data with carefully selected third parties only in the following circumstances:

• Payment processors and financial service providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum payment data required to process your deposit and withdrawal transactions. These providers operate under their own privacy and security obligations.
• Game software providers: Evolution Gaming, Pragmatic Play, Ezugi, Spribe, Microgaming, NetEnt, and other certified providers receive session-level data required to operate their games on the Platform. They do not receive your payment details or identity documents.
• Legal and regulatory authorities: where required by applicable law, court order, or regulatory instruction, nnko may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities. nnko will notify affected users where it is legally permitted to do so.

Where nnko engages third-party service providers, contractual data protection obligations are imposed to ensure that your data is handled with the same standard of care that nnko applies internally. nnko does not permit third parties to use your data for their own independent purposes.

nnko processes financial transaction data, including deposit and withdrawal records, for the purpose of operating your account and complying with financial crime prevention requirements. Payment method identifiers — such as the registered mobile number associated with your bKash or Nagad account, or masked card details for Visa and Mastercard transactions — are stored in encrypted form and are used solely to process transactions and verify payment ownership.

nnko does not store full payment card numbers. Card-based transactions are processed by certified payment gateway partners who operate in compliance with applicable card industry data security standards. nnko is not responsible for the data handling practices of external payment processors, which are governed by those processors' own privacy policies and security certifications.

nnko retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law. Account data is retained for the duration of the account's active life and for a period of at least five years following account closure, in accordance with standard financial record-keeping obligations. Transaction records are retained for a minimum of five years from the date of each transaction.

Support and communications records are retained for a minimum of two years from the date of last interaction to enable dispute resolution. Where a legal hold or regulatory investigation requires extended retention of specific data, nnko will retain that data for the duration of the hold or investigation. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

nnko implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption of all data transmitted between your device and nnko.vu, encrypted storage of sensitive account credentials and payment identifiers, access controls that restrict internal access to personal data on a strict need-to-know basis, and regular security reviews of the Platform's infrastructure.

While nnko takes reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for keeping your account credentials confidential. If you believe your account has been compromised, you must contact nnko support immediately at [email protected] so that appropriate protective steps can be taken without delay.

nnko.vu uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit the Platform. nnko uses the following categories of cookies: strictly necessary cookies required for the Platform to function (for example, session authentication cookies that keep you logged in during an active session); performance and analytics cookies that collect anonymised data about how users interact with the Platform, used to improve page load times, navigation, and game loading performance; and preference cookies that remember your language and display settings between sessions.

You may configure your mobile browser to refuse all cookies or to alert you when cookies are being set. Please note that disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from accessing certain features, including your account. nnko does not use cookies to serve third-party advertising or to build cross-site behavioural profiles.

Subject to applicable law, you hold the following rights in relation to the personal data that nnko holds about you. To exercise any of these rights, contact nnko support at [email protected] with your registered mobile number and a description of your request:

• Right of access: you may request a copy of the personal data nnko holds about you and information about how it is being used.
• Right to rectification: if you believe that personal data nnko holds about you is inaccurate or incomplete, you may request that it be corrected or supplemented.
• Right to erasure: in certain circumstances, you may request that nnko delete personal data it holds about you. This right is subject to overriding legal obligations, including data retention requirements under financial crime prevention law.
• Right to restriction: you may request that nnko restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing based on legitimate interests.
• Right to object: you may object to the processing of your personal data where nnko relies on legitimate interests as the legal basis, or where your data is used for direct marketing purposes.

nnko will respond to all data rights requests within a reasonable timeframe. Where a request cannot be fulfilled due to overriding legal obligations, nnko will explain the reason for the refusal. nnko does not charge a fee for processing data rights requests unless a request is manifestly unfounded or excessive.

nnko may update this Privacy Policy from time to time to reflect changes in the Platform's data handling practices, changes in applicable law, or improvements to our security measures. When material changes are made, nnko will update the effective date shown at the top of this page. Your continued use of the Platform after the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

We recommend that you review this Privacy Policy periodically to stay informed about how nnko is protecting your personal data. The most current version of this Privacy Policy will always be accessible at nnko.vu/privacy-policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a potential data breach or security concern relating to your nnko account, please contact the nnko support team. The support team is available 24 hours a day, 7 days a week to assist you.

Contact email for privacy and data enquiries: [email protected]. Please include your registered mobile number and a brief description of your query in your initial message. nnko aims to acknowledge all data-related enquiries within 3 business days and to resolve them within 30 calendar days.