sora2 Privacy Policy —
Your Data, Your Rights

1. Introduction

This Privacy Policy describes how sora2 ("we", "us", "the Platform") collects, uses, stores, and protects the personal data of players who register and use the sora2 platform at sora2.bid. It applies to all players, including those accessing sora2 from Bangladesh, and covers all personal data collected through the sora2 website, mobile app, and any related services.

sora2 is committed to handling your personal data responsibly and transparently. We understand that privacy matters to our players, and we have built our data practices around the principle that your information belongs to you. sora2 collects only what is necessary, uses it only for legitimate purposes, and protects it with appropriate security measures.

By registering an account on sora2 or using any part of the sora2 platform, you acknowledge that you have read this Privacy Policy and consent to the collection and use of your personal data as described here. If you do not agree with this Privacy Policy, please do not use sora2.

2. Data We Collect

sora2 collects personal data in several categories depending on how you interact with the platform. Below is a clear breakdown of the types of data sora2 may hold about you.

sora2 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required by law or responsible gaming obligations.

3. How We Collect Your Data

sora2 collects your personal data through the following channels:

• Direct registration: When you create a sora2 account, you provide your name, email, phone number, and date of birth directly.
• KYC verification: When sora2 requests identity documents, you upload them directly through the sora2 platform.
• Deposits and withdrawals: When you transact on sora2, your payment method details and transaction records are captured automatically.
• Gameplay activity: sora2 automatically records your game sessions, bet amounts, and outcomes as part of normal platform operation.
• Device and browser data: sora2 automatically collects technical data such as your IP address, device type, and browser version when you access the platform.
• Customer support: When you contact sora2 support via live chat or email, the content of those communications is recorded.
• Cookies and tracking technologies: sora2 uses cookies and similar technologies to collect usage data. See Section 7 for full details.

4. Why We Use Your Data

sora2 uses your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was collected. The main reasons sora2 processes your personal data are:

• To create and manage your sora2 account and verify your identity.
• To process deposits, withdrawals, and other financial transactions on sora2.
• To comply with KYC, anti-money laundering (AML), and other legal obligations applicable to sora2.
• To detect and prevent fraud, cheating, and other prohibited conduct on sora2.
• To provide customer support and resolve disputes on sora2.
• To send you account-related notifications such as transaction confirmations and security alerts from sora2.
• To send you promotional communications about sora2 offers and bonuses — only where you have consented or where sora2 has a legitimate interest.
• To monitor gameplay for responsible gaming purposes and apply limits or restrictions where necessary on sora2.
• To improve the sora2 platform, fix bugs, and develop new features based on usage patterns.
• To comply with any court orders, regulatory requests, or legal processes applicable to sora2.

5. Legal Basis for Processing

sora2 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract performance: Processing necessary to fulfil sora2's obligations to you under the Terms and Conditions — such as operating your account and processing transactions.
• Legal obligation: Processing required for sora2 to comply with applicable laws, including KYC, AML, and regulatory reporting requirements.
• Legitimate interests: Processing that serves sora2's legitimate business interests — such as fraud prevention, platform security, and service improvement — where those interests are not overridden by your rights.
• Consent: Processing based on your explicit consent — such as receiving marketing communications from sora2. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Who We Share Your Data With

sora2 does not sell your personal data. We share your data only with trusted third parties who help us operate the sora2 platform, and only to the extent necessary for those purposes. The categories of recipients are:

• Payment processors: bKash, Nagad, Rocket, and other payment service providers receive the financial data necessary to process your transactions on sora2.
• Identity verification providers: Third-party KYC services that help sora2 verify your identity and comply with AML obligations.
• IT and hosting providers: Companies that provide the servers, infrastructure, and technical services that power sora2.
• Customer support tools: Platforms used by sora2 to manage live chat and email support communications.
• Analytics providers: Services that help sora2 understand how the platform is used, in aggregated or anonymised form where possible.
• Regulatory and legal authorities: Where sora2 is required by law, court order, or regulatory direction to disclose your data.

All third parties who receive personal data from sora2 are required to handle it securely and in accordance with applicable data protection standards. sora2 does not permit third-party service providers to use your data for their own marketing purposes.

7. Cookies & Tracking Technologies

sora2 uses cookies and similar tracking technologies to improve your experience on the platform, keep you logged in, remember your preferences, and collect usage analytics. A cookie is a small text file stored on your device when you visit sora2.

The types of cookies sora2 uses include:

• Essential cookies: Required for sora2 to function correctly — including session management and security. These cannot be disabled.
• Functional cookies: Remember your preferences and settings on sora2, such as language and display options.
• Analytics cookies: Help sora2 understand how players use the platform so we can improve it. Data collected is aggregated and anonymised where possible.
• Security cookies: Used by sora2 to detect and prevent fraudulent activity and protect your account.

You can control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of sora2. sora2 does not use third-party advertising cookies or cross-site tracking technologies for ad targeting.

8. Data Retention

sora2 retains your personal data for as long as your account is active and for a defined period after account closure. The specific retention periods depend on the type of data and the legal obligations applicable to sora2:

• Account and identity data: Retained for the duration of your sora2 account and for up to 5 years after closure to meet AML and regulatory requirements.
• Transaction records: Retained for up to 7 years after the transaction date in accordance with financial record-keeping obligations applicable to sora2.
• Support communications: Retained for up to 3 years after the last interaction to support dispute resolution on sora2.
• Technical and usage data: Retained for up to 12 months in identifiable form, after which it is anonymised or deleted by sora2.

When personal data is no longer required, sora2 securely deletes or anonymises it so that it can no longer be linked to you. You may request early deletion of your data subject to sora2's legal retention obligations — see Section 10 for your rights.

9. Security Measures

sora2 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and sora2.
• Encrypted storage of sensitive personal and financial data on sora2 servers.
• Strict access controls — only authorised sora2 personnel can access personal data, and only to the extent required for their role.
• Regular security audits and vulnerability assessments of the sora2 platform.
• Two-factor authentication available for all sora2 player accounts.
• Monitoring systems that detect and alert sora2 to suspicious account activity in real time.

While sora2 takes every reasonable precaution, no online platform can guarantee absolute security. If you suspect that your sora2 account has been compromised, contact sora2 support immediately. In the event of a data breach that affects your rights, sora2 will notify you as required by applicable law.

10. Your Privacy Rights

As a sora2 player, you have the following rights over your personal data. You can exercise any of these rights by contacting sora2 support at [email protected]. sora2 will respond to all valid requests within 30 days.

sora2 will not discriminate against you for exercising any of these rights. Some rights are subject to legal limitations — for example, sora2 cannot delete transaction records that must be retained for regulatory compliance. Where a request cannot be fulfilled in full, sora2 will explain why.

11. Children's Privacy

sora2 is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. If sora2 discovers that a player under 18 has registered an account, the account will be closed immediately, all deposits will be returned where possible, and any personal data collected will be deleted from sora2 systems.

If you believe that a minor has registered on sora2, please contact us immediately at [email protected] so we can investigate and take appropriate action.

12. Third-Party Links

The sora2 platform may contain links to third-party websites or services — for example, payment provider portals. sora2 is not responsible for the privacy practices of those third-party sites. Once you leave sora2 and visit a third-party site, their own privacy policy applies. We encourage you to review the privacy policies of any third-party services you use in connection with sora2.

13. Changes to This Privacy Policy

sora2 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make changes, the updated policy will be published on this page with a revised "last updated" date at the top.

For significant changes that materially affect how sora2 uses your personal data, we will notify registered players via email before the changes take effect. Your continued use of sora2 after any update constitutes acceptance of the revised Privacy Policy. If you do not agree with the updated policy, you may request account closure by contacting sora2 support.