7p7p Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how 7p7p ("7p7p", "we", "us", or "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "your", or "the Player") who access or use the website located at https://7p7p.io and all associated sub-pages, services, features, and promotional activities (collectively, the "Platform").

7p7p is an online casino and sports betting platform designed for players in Bangladesh. We are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy, both of which are incorporated herein by reference.

This Policy applies to all personal data processed by 7p7p in connection with the Platform. It does not apply to third-party websites or services that may be accessible via links on the Platform, which operate under their own independent privacy policies.

2 Data We Collect

7p7p collects personal data in the following categories. In each case, the category of data is collected only to the extent necessary for the purposes described in this Policy.

3 How We Collect Your Data

7p7p collects personal data through the following channels:

3.1 Direct Collection

You provide data directly to us when you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, respond to a promotion or survey, or submit a complaint or feedback.

3.2 Automated Collection

When you access the 7p7p Platform, our servers automatically record certain technical data including your IP address, device identifiers, browser type and version, referral URL, pages visited, and session activity. This data is collected through standard web server logs and analytics tools.

3.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies (including local storage, session tokens, and analytics pixels) to maintain your logged-in session, remember your preferences, monitor Platform performance, and analyse aggregate usage patterns. Full details are provided in Section 7 of this Policy.

3.4 Third-Party Sources

We may receive limited personal data from third-party identity verification providers, fraud detection services, and payment processors where this is necessary to validate your identity, process your transactions, or prevent unauthorised account activity.

4 Legal Basis for Processing

7p7p processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically to operate your player account, process deposits and withdrawals, and provide access to games and betting markets.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and fraud prevention duties.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including Platform security, fraud detection, service improvement, and responsible gaming monitoring, provided those interests are not overridden by your rights.
• Consent: Where we rely on consent as a legal basis — for example, for sending you promotional communications or optional analytics — we will ask for your explicit consent and you may withdraw it at any time without affecting the lawfulness of prior processing.

5 How We Use Your Data

7p7p uses the personal data we collect for the following purposes:

• Account Management: Creating, maintaining, and securing your player account; processing login requests; resetting passwords; enforcing account limits.
• Payment Processing: Verifying and processing deposits and withdrawals via bKash, Nagad, Rocket, and Upay; reconciling transaction records; investigating payment disputes.
• Identity Verification: Confirming your age (21+), identity, and residential address as required by our KYC procedures and responsible gaming obligations.
• Fraud Prevention and Security: Detecting and preventing fraudulent activity, money laundering, collusion, account takeovers, and other prohibited conduct described in our Terms and Conditions.
• Responsible Gaming: Monitoring betting patterns for signs of problem gambling; administering deposit limits, session limits, cooling-off periods, and self-exclusion requests; fulfilling our duty of care to players.
• Customer Support: Responding to your queries, complaints, and requests; maintaining records of support interactions for quality assurance purposes.
• Platform Improvement: Analysing aggregate usage patterns to improve game offerings, Platform performance, user experience, and promotional strategies.
• Legal Compliance: Maintaining records required by applicable law; responding to lawful requests from regulatory authorities or law enforcement agencies.
• Marketing Communications: Sending you promotional offers, bonus announcements, and platform updates, where you have consented to receive such communications or where we have a legitimate interest in doing so.

6 Data Sharing and Disclosure

7p7p does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

6.1 Service Providers

We engage carefully vetted third-party service providers to assist with identity verification (KYC), payment processing, fraud detection, IT infrastructure, and customer support operations. These providers are contractually bound to process your data only on our instructions and to maintain appropriate security standards.

6.2 Game Studios and Content Providers

When you play games provided by third-party studios such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, or Spribe, limited technical data (such as session tokens and game round identifiers) is shared with the relevant provider to facilitate game delivery and result verification. These studios do not receive your identity or financial data.

6.3 Payment Partners

To process your deposits and withdrawals, we share the minimum necessary transaction data with the relevant mobile financial service providers including bKash, Nagad, Rocket, and Upay. This sharing is strictly limited to what is required to complete each transaction.

6.4 Legal and Regulatory Authorities

We may disclose your personal data to law enforcement agencies, regulatory bodies, or other authorised public authorities where we are required to do so by law, court order, or in connection with the investigation of suspected illegal activity including money laundering or fraud.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a substantial portion of 7p7p's business assets, your personal data may be transferred to the acquiring entity. We will notify you of any such transfer and any material changes to the privacy terms applicable to your data.

7 Cookies & Tracking Technologies

7p7p uses cookies and similar technologies to provide a functional, personalised, and secure player experience. The following table summarises the types of cookies we use and their purposes:

Essential cookies are necessary for the Platform to function and cannot be disabled without disrupting core services such as your login session. Analytics and functional cookies may be disabled by adjusting your browser settings or by contacting [email protected]. Please note that disabling non-essential cookies may limit certain personalisation features of the Platform.

7p7p does not use third-party advertising cookies or retargeting pixels that track your activity across other websites for commercial advertising purposes.

8 Data Retention

7p7p retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account and for a minimum of 5 years following account closure, to comply with anti-money laundering and KYC regulatory obligations.
• Financial Transaction Records: Retained for a minimum of 7 years following each transaction in accordance with standard financial record-keeping requirements.
• Identity Verification Documents: Retained for a minimum of 5 years following account closure or the completion of the verification process, whichever is later.
• Customer Support Records: Retained for 3 years following the closure of each support interaction, unless a longer period is required for ongoing dispute resolution.
• Technical and Usage Logs: Retained for up to 13 months for analytics and security purposes, after which they are aggregated or deleted.
• Marketing Consent Records: Retained for as long as necessary to demonstrate your consent and for 3 years following any opt-out.

When your personal data is no longer required for a legitimate purpose or legal obligation, 7p7p will securely delete or anonymise it so that it can no longer be associated with you as an individual.

9 Data Security

7p7p implements a multi-layered security framework to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include but are not limited to:

• Encryption in Transit: All data transmitted between your device and 7p7p's servers is encrypted using 256-bit SSL/TLS protocols, ensuring that your login credentials, payment details, and personal data cannot be intercepted during transmission.
• Encryption at Rest: Sensitive personal data, including identity documents and financial records, is encrypted at rest using AES-256 encryption on 7p7p's secure servers.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational need are granted access, and all access events are logged and audited.
• Two-Factor Authentication: 7p7p supports and encourages the use of two-factor authentication (2FA) on player accounts to provide an additional layer of protection against unauthorised login attempts.
• Regular Security Audits: Our Platform and infrastructure are subject to regular internal security reviews and periodic third-party penetration testing to identify and address potential vulnerabilities.
• Incident Response: In the event of a data breach that poses a risk to your rights, 7p7p will notify affected players and relevant authorities as promptly as practicable and take immediate steps to contain the breach and mitigate its impact.

10 Your Data Rights

As a player on the 7p7p Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond to all verified requests within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is being used.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You have the right to request that we delete your personal data in certain circumstances, such as where the data is no longer necessary for the purpose for which it was collected. This right is subject to overriding legal obligations to retain certain records.
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances, such as while a rectification request is being resolved.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis, or where your data is used for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

11 Children's Privacy

The 7p7p Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect, process, or store personal data from individuals under the age of 21. If you are under 21, you are not permitted to register an account or use the Platform in any capacity.

If 7p7p becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data from our systems and permanently close the associated account. If you believe that a minor has registered on the Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

Parents and guardians are strongly encouraged to make use of internet filtering tools and parental controls to prevent underage access to online gambling platforms. 7p7p supports the responsible use of such tools and recommends visiting our Responsible Gaming page for further guidance.

12 Third-Party Links

The 7p7p Platform may from time to time contain references to third-party game studios, payment service providers, or other external services. Where such references include hyperlinks, please be aware that those third-party websites operate independently of 7p7p and are governed by their own privacy policies.

7p7p does not control and accepts no responsibility for the privacy practices or content of any third-party website. We encourage you to review the privacy policy of any third-party service you access through the Platform before providing any personal information to that service.

13 Amendments to This Policy

7p7p reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. When material changes are made, we will notify registered players via the email address associated with their account and display a prominent notice on the Platform for a period of at least 14 days following the update.

The "Last Updated" date at the top of this Policy will always reflect when the most recent revision was made. We encourage you to review this Policy periodically to remain informed about how 7p7p handles your personal data. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of those changes.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 7p7p handles your personal data, please contact our Data Protection team using the details below. We are committed to addressing all privacy-related enquiries promptly and professionally.

For requests to exercise your data rights (access, erasure, portability, etc.), please use the subject line "Data Rights Request" and include your registered account username and email address to facilitate identity verification.

If you are dissatisfied with our response to a privacy concern, you retain the right to raise the matter with the appropriate data protection authority or to seek legal redress through applicable judicial channels.