Privacy policy

The short version

• No user accounts, no logins, no passwords held by us.
• No database, and no server-side processing of anything you type.
• No cookies set by this site itself.
• One third-party tag: Google Analytics, which you can decline.
• One item of local storage: your cookie choice, kept in your own browser.
• We never sell, rent or trade data. There is nothing to sell.
• We never ask for payment details, account passwords or OTPs — and never will.

Who this policy covers

This policy applies to bonu1.site (“this site”, “we”, “us”), an independent affiliate website publishing guides to the Bonu1 app for readers in India. It covers what happens when you browse these pages or contact us through the channels we list.

It does not cover the Bonu1 app or platform, which is run by a third party, nor any other website you reach by following a link from here. Once you leave this site, the destination’s own privacy policy applies to you.

What we collect

Analytics data (only if you accept)

If you accept analytics in our cookie notice, Google Analytics collects standard measurement data about your visit: the pages you view, roughly how long you spend on them, how you arrived (search, direct or referral), your approximate location derived from IP address at city or region level, and general device and browser characteristics such as screen size and operating system.

We use this in aggregate only — to see which pages are actually read, which are ignored, and where something is confusing enough that people leave. We do not attempt to identify individual visitors and have no means of doing so.

Standard web server logs

Like effectively every website, the hosting infrastructure that serves these pages records ordinary request logs: IP address, timestamp, requested URL, HTTP status and user-agent string. These are generated automatically by the server, are used for security and diagnosing faults, and rotate on the host’s standard schedule.

Information you volunteer to us

If you message us on Telegram, we necessarily see what you send and whatever your Telegram profile displays. That is the only route by which we receive personal information directly, and we only ever see what you choose to send.

What we do not collect

To be specific, because vagueness here is how policies mislead:

• We do not operate accounts, logins or profiles, so we hold no credentials.
• We do not collect or store payment card, bank or UPI details. There is nothing to pay for.
• We do not collect KYC or identity documents. Those go to the operator, never to us.
• We do not have access to your gaming account, balance, deposits, withdrawals or game history.
• We do not run a newsletter or mailing list, and do not build marketing profiles.
• We do not fingerprint devices, and we do not use session-replay or heat-mapping tools.
• We do not host third-party advertising networks or ad-retargeting pixels.
• We do not sell, rent, trade or share data with data brokers.

Google Analytics

This site loads Google Analytics 4 (measurement ID G-37HFSQM2Q1) via Google’s gtag.js tag. Google acts as our analytics processor and may process data on infrastructure outside India, including in the United States and the European Union.

Google Analytics sets its own cookies in your browser to distinguish one visit from another. Those cookies belong to Google, not to us — we cannot read them, and we have no access to any Google account you may be signed into.

How to decline

You can switch analytics off in any of these ways, and they all work:

• Choose Decline in the cookie notice shown on your first visit. We record that choice in your browser and instruct the tag to deny analytics storage on subsequent loads.
• Install Google’s official Analytics Opt-out Browser Add-on.
• Block third-party scripts or use a browser with tracking protection enabled.
• Clear cookies and site data for this domain at any time.

Declining changes nothing about how the site works for you. Every page remains fully functional and no content is withheld.

Google’s own handling of this data is governed by the Google Privacy Policy.

Cookies & local storage

This site sets no cookies of its own. Not for tracking, not for preferences, not for anything. We say this plainly rather than implying a complex consent architecture that does not exist here.

The consent entry is stored in your browser’s local storage on your own device. It is never transmitted to us and we cannot read it remotely. Clearing your browser data removes it, after which the notice will appear again.

The contact form

The form on our contact page is validated entirely in your browser. It has no backend. When you submit it, nothing is sent to a server, nothing is emailed, and nothing is stored — the page simply opens our Telegram support channel so you can send the message yourself, with a person on the other end.

The practical consequence: anything you type and then navigate away from is gone. It never reaches us. This is why we ask you not to put account numbers, passwords, OTPs or payment details into it — not only because we do not need them, but because the form is not a route to us at all.

Telegram channels

We operate a support channel and a community channel on Telegram. When you interact with either, Telegram processes your data under its own privacy policy, and we see whatever your profile makes visible plus whatever you send us.

We keep support conversations only as long as needed to help you, and we do not export them, build records from them, or use them for marketing. Please do not send us identity documents, passwords or OTPs on Telegram — we will not ask for them, and anyone who does is not us.

Why we process this data

Under India’s Digital Personal Data Protection Act, 2023 and general data-protection principles, our grounds for processing are:

• Your consent — for analytics, requested explicitly through the cookie notice and withdrawable at any time.
• Legitimate operational interest — for server logs, which are necessary to serve pages, keep the site available and investigate abuse or attack.
• Performing a service you asked for — when you contact us and we reply.

We process the minimum needed for each of these purposes and nothing beyond it.

Sharing & disclosure

We do not sell, rent or trade personal data. Data is shared only in these situations:

• Google, as our analytics processor, for the measurement described in section 5.
• Our hosting provider, which necessarily processes server logs in order to serve the site.
• Telegram, where you choose to contact us on that platform.
• Where legally required — in response to a valid legal order, or to establish, exercise or defend legal claims.

Affiliate links

When you follow a link from this site to the operator, the destination may record that the visit originated here, typically via a referral parameter or referrer header. That is how affiliate attribution works and how this site is funded. It tells the operator where you came from; it does not transmit any personal information about you from us, because we hold none to transmit.

Retention

• Analytics data — retained by Google under our property’s configured retention period, then deleted or aggregated by Google.
• Server logs — rotated and deleted on the hosting provider’s standard schedule, typically within a small number of months.
• Telegram conversations — kept only as long as needed to resolve your query.
• Your consent choice — held on your own device until you clear site data.

Security

This site is served over HTTPS. Because it holds no accounts, no database and no payment data, the attack surface is deliberately small — there is no store of personal information here to breach.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. What we can tell you is that the most valuable thing you have — your gaming account credentials — is never held by us in the first place. Protect it with a unique password, enable any two-factor option the app offers, and never share an OTP with anyone, including anyone claiming to be support.

Your rights

Under the Digital Personal Data Protection Act, 2023 and comparable frameworks, you have rights including access to your data, correction, erasure, withdrawal of consent, and the right to complain to a supervisory authority.

In practice, exercising most of these against us is unusually simple, because we hold almost nothing:

• Withdraw analytics consent — clear this site’s data in your browser and choose Decline when the notice reappears.
• Erasure — clearing your browser data removes the only item we cause to be stored on your device.
• Access — ask us and we will tell you exactly what we hold, which for a browsing visitor is nothing that identifies you.
• Analytics data held by Google — use Google’s opt-out add-on, or exercise your rights with Google directly, since they are the processor.

For personal data held by the operator — your account, KYC documents, transactions and gameplay history — you must exercise your rights with them directly. We cannot access or delete any of it.

Children

This site is strictly for adults aged 18 or over. We do not knowingly collect data from anyone under 18 and do not direct any content to children. If you believe a minor has been in contact with us, tell us and we will delete any associated conversation immediately.

If you share a device, keep the app logged out and consider device-level parental controls. Allowing a minor access to a real-money gaming account is a breach of the operator’s terms as well as ours.

The operator’s own privacy practices

This is the most important section for most readers. When you download the app and register, you enter a relationship with the operator, not with us. They will collect substantially more than this site ever could — typically your name, mobile number, date of birth, identity and address documents for KYC, payment instrument details, device information, and a full record of your deposits, withdrawals and gameplay.

All of that is governed by the operator’s privacy policy, which you should read inside the app before registering. We have no access to it, no control over it, and no ability to act on requests about it. If you want data held by the operator corrected or deleted, you must ask the operator.

Changes to this policy

We may update this policy to reflect changes in our practices or in applicable law. The revised version takes effect when published here and the “last reviewed” date is updated. As we run no mailing list, we cannot notify you individually — please check back periodically.

Contacting us

Questions about this policy, requests about data we might hold, or reports of anyone impersonating this site should go through our contact page or directly to our Telegram support channel. We aim to respond within a working day.

Please remember that we cannot help with data held by the operator, and that we will never ask you for a password, an OTP or payment details in any conversation.