Review the key points below before reading the full details
Sona001 collects only the information that is necessary — nothing more
This Privacy Policy applies to all services on the sona001 platform — including the website, mobile app, and any other channel through which you interact with sona001.
This policy clearly states what data we collect, why we collect it, how it is used, and what your rights are. sona001 believes every user should have control over their own data.
By using sona001's services, you agree to this Privacy Policy. If you have any objections to any part of it, please contact us before continuing to use the service.
Sona001 collects information through three channels – what you provide directly, what is collected automatically, and what comes through third-party services.
Information You Provide Directly:
Automatically Collected Information:
Sona001 uses the information it collects solely for specific purposes. Each purpose and its legal basis are outlined below:
| Purpose of Use | What Information | Legal basis |
|---|---|---|
| Account Management | Mobile number, username | Contract fulfillment |
| Age & Identity Verification | Date of birth, KYC documents | Legal obligations |
| Payment Processing | Transaction records | Contract fulfillment |
| Fraud detection | IP address, device information | Legitimate interest |
| Customer Support | Contact information | Contract fulfillment |
| Promotional communications | Mobile number, email | Your Consent |
If you no longer wish to receive promotional messages, you can opt out at any time from the notification settings in your account.
Sona001 protects user data using the most advanced technical safeguards available. Key features of our security infrastructure:
Data retention period:
Sona001 does not sell your personal data to third parties. However, limited information may need to be shared in certain specific circumstances:
Data is shared when:
Data is never shared:
Sona001 uses cookies and similar technologies to improve platform performance and keep your experience running smoothly.
Types of Cookies We Use:
What we do not use:
You can delete or block cookies at any time through your browser settings. Please note that disabling essential cookies may cause some platform features to stop working.
Sona001 believes every user should have full control over their own data. You have the following rights:
To exercise these rights, email us at support@sona001.click. Requests are typically responded to within 30 days.
Sona001 is strictly not intended for anyone under 18 years of age. We do not knowingly collect personal information from minors.
Date of birth is verified at registration. Where there is any doubt, age is confirmed through KYC verification. If we become aware that data from a minor has been collected inadvertently, that account is immediately closed and all associated data is deleted.
If you believe a minor has created an account on sona001, please let us know — we will take prompt action.
Sona001 may update this Privacy Policy from time to time due to business changes, new services, or legal requirements.
At least 7 days before any significant change takes effect:
Continued use of the service after any changes will be considered acceptance of the updated policy. If you do not agree to the changes, you have the right to close your account.
If you have any questions, requests, or complaints regarding our Privacy Policy, please get in touch with us.
When submitting a data rights request, please specify clearly what you need — whether that is viewing, correcting, or deleting your information, or something else. This helps us assist you faster and more accurately.
Sona001 respects these rights and is committed to upholding them
Concerns about the security of personal data on online platforms in Bangladesh are very real. Incidents of cyber fraud, phishing attacks, and data theft are on the rise. In this context, sona001 Made a deliberate decision that user privacy will be a business priority — not just a legal obligation.
We've noticed that many platforms write their privacy policies in language so complex that most people have no interest in reading or understanding them — and then use that unread policy as cover to sell user data. sona001 has taken a different approach. This entire policy is written in plain English because we want you to read it, understand it, and ask questions.
When paying with bKash or Nagad, many users wonder — is my number being saved? Is my PIN going anywhere? The answer is no. When you make a payment on sona001, you are redirected to the respective gateway's own verification process. Your PIN and full account number never reach our servers. We only receive confirmation of whether the transaction was successful.
We use this tokenized approach because we believe that storing less data than necessary is the best security practice.
Copies of national ID documents are stored in an encrypted archive after verification. Access is restricted to designated members of the security and compliance teams, and all access is logged upon completion.
You may request deletion of your KYC documents after account closure, provided no legal obligation requires us to retain them.
IP addresses are collected primarily for security purposes. They allow us to alert you if login attempts are made from multiple unusual locations on the same account, and to detect when multiple accounts are created from the same IP. This is to protect users — not to track them.
IP addresses reveal only country-level location, not your home address, and are never used for advertising or marketing purposes.
While this has not occurred to date, sona001 has a clearly defined data breach response plan. Affected users will be notified within 72 hours of any breach, with a full account of what was impacted and what steps are being taken to limit the damage.
Frequently Asked Questions