A safety check before you install Bonu7
The useful habit is short. Download the APK yourself from bonu7vip.com, allow “Install unknown apps” only for the browser or files app that opens that file, then turn the permission off after the install finishes.
Do not open an APK that arrived in a message. Do not send a password or OTP to someone who contacted you. Log in only inside the app. This site explains the login, and it does not collect passwords.
When a new build is released, install that file from the same site over the old app. A full list is on the safety guide.