Privacy Policy

Our Commitment to Your Privacy

What this policy covers and when it applies

This Privacy Policy ("Policy") describes how 7p7 ("we", "us", "our") collects, uses, stores, shares, and protects the personal information of individuals who visit or use the 7p7 platform at 7p7.bio ("the Platform"). It applies to all visitors, registered account holders, and anyone who contacts 7p7 through any channel, including live chat and email.

By accessing the Platform, registering an account, or interacting with any 7p7 service, you confirm that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree, you must stop using the Platform immediately.

7p7 takes data privacy seriously. We do not sell your personal information to third parties, and we only share it where strictly necessary for the purpose of operating the Platform, processing payments, verifying your identity, or complying with legal obligations. All data handling practices described in this Policy are consistent with widely recognised international data protection standards.

This Policy should be read alongside our Terms & Conditions. In the event of any conflict between this Policy and the Terms, the Terms shall prevail.

Privacy at a Glance

Six core principles that guide how 7p7 handles your data

1. Data We Collect

The categories of personal information 7p7 may hold about you

1.1 Information You Provide Directly

When you register an account, make a deposit, request a withdrawal, or contact our support team, you may provide us with the following categories of personal data:

• Identity data — full name, date of birth, gender, and national ID or passport number
• Contact data — email address, mobile phone number, and residential address (city, district, division)
• Account credentials — username and encrypted password hash (we never store plaintext passwords)
• Financial data — bKash, Nagad, Rocket, or Upay mobile wallet numbers; bank account details where applicable; transaction reference numbers
• Verification documents — copies of government-issued photo ID, proof of address, or other KYC documents submitted during the identity verification process
• Communications data — records of live chat conversations, support emails, and any other correspondence you send to 7p7

1.2 Information Collected Automatically

When you access the Platform, our systems automatically collect certain technical data, including:

• Device data — device type, operating system, browser type and version, screen resolution, and device identifiers
• Log data — IP address, access timestamps, pages visited, referring URLs, and session duration
• Usage data — games played, bets placed, wager amounts, win/loss history, and bonus activity
• Cookie and tracking data — see Section 5 (Cookies) for full details

1.3 Information from Third Parties

In some circumstances, 7p7 may receive personal data about you from third-party sources, including:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard) confirming transaction status
• Identity verification and fraud-prevention service providers
• Publicly available sources, where permitted by applicable law, for the purpose of verifying information you have provided

2. How We Use Your Data

The purposes for which 7p7 processes your personal information

7p7 processes personal data only for legitimate, defined purposes. We will not use your data in any manner that is incompatible with the purposes listed below:

3. How We Share Your Data

Circumstances under which your information may be disclosed to others

7p7 does not sell, trade, or rent your personal data. We may share your information only in the limited circumstances described below:

3.1 Service Providers

We engage carefully selected third-party service providers to assist in operating the Platform. These providers act as data processors on our behalf and are contractually bound to handle your data only for the specific purpose for which it was shared, and to maintain appropriate security standards. Categories of service provider include:

• Payment processing partners — bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks including Dutch-Bangla Bank, City Bank, and BRAC Bank
• Identity verification and KYC/AML compliance providers
• Game software suppliers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed studios whose games are available on the Platform
• IT infrastructure, hosting, and cybersecurity providers
• Customer support platform providers

3.2 Legal and Regulatory Disclosure

7p7 may disclose your personal data to law enforcement agencies, government bodies, courts, or other official authorities where required to do so by applicable law, regulation, court order, or where we have a good-faith belief that disclosure is necessary to prevent imminent harm, financial crime, or to protect the rights of 7p7 or third parties.

3.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a material portion of 7p7's business assets, your personal data may be transferred as part of that transaction. We will take reasonable steps to ensure that your data continues to be protected in accordance with this Policy following any such transfer, and we will notify affected users where required by applicable law.

4. Data Retention

How long 7p7 keeps your personal information

7p7 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data — retained for the lifetime of your account and for a minimum of five years following account closure, in compliance with anti-money-laundering record-keeping obligations
• Transaction records — retained for a minimum of five years from the date of each transaction
• KYC verification documents — retained for a minimum of five years following account closure
• Support communications — retained for two years from the date of the last interaction
• Cookie and session data — retained in accordance with the cookie durations described in Section 5

When personal data is no longer required, 7p7 will securely delete or anonymise it so that it can no longer be associated with any individual. Where full deletion is not immediately practicable due to backup and archival systems, the data will be isolated and protected from further active processing until it can be permanently removed.

5. Cookies & Tracking Technologies

How 7p7 uses cookies and what choices you have

The Platform uses cookies and similar tracking technologies (such as local storage and session tokens) to operate correctly, remember your preferences, and improve your experience. A cookie is a small text file placed on your device by a web server. It cannot execute code or deliver viruses.

5.1 Types of Cookies We Use

• Strictly necessary cookies — Required for the Platform to function. These include session authentication tokens that keep you logged in during your visit. You cannot opt out of these.
• Functional cookies — Remember your preferences such as language, currency display (BDT), and game lobby layout. Retained for up to 12 months.
• Analytics cookies — Used to understand how players interact with the Platform, which pages are visited most, and where errors occur. Data is aggregated and anonymised. Retained for up to 24 months.
• Security cookies — Help detect and prevent fraudulent activity, including CSRF tokens and device fingerprint hashes. Retained for the duration of a session or up to 30 days.

5.2 Managing Cookies

You may control or delete cookies through your browser settings at any time. Please be aware that disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from logging in or completing transactions. Detailed instructions for managing cookies are available in your browser's help documentation.

6. Your Data Rights

What you can ask 7p7 to do with your personal information

You have the following rights in relation to the personal data 7p7 holds about you. To exercise any of these rights, please contact us at [email protected]. We will respond to all verified requests within a reasonable timeframe and in any event within 30 calendar days.

• Right of access — You may request a copy of the personal data we hold about you and information about how it is used.
• Right to rectification — You may ask us to correct any inaccurate or incomplete personal data without undue delay.
• Right to erasure — You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restriction — You may ask us to suspend the processing of your data in certain circumstances, for example while a correction request is being resolved.
• Right to data portability — Where processing is based on your consent or a contract, you may request that your data be provided to you in a structured, commonly used, and machine-readable format.
• Right to object — You may object to processing based on our legitimate interests, including direct marketing.
• Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

7. Data Security

Technical and organisational measures protecting your data

7p7 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and the Platform
• Encrypted storage of passwords using industry-standard hashing algorithms
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Regular security audits and vulnerability assessments of Platform infrastructure
• Automated monitoring systems for suspicious login activity and potential data breaches
• Segregated storage of KYC documents with additional access restrictions

Despite these measures, no method of electronic transmission or storage is completely secure. 7p7 cannot guarantee absolute security of your data. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 7p7 will notify affected users without undue delay and will take all reasonable steps to contain and remediate the breach.

8. Protection of Minors

7p7 does not collect data from individuals under 21

The 7p7 Platform is strictly intended for adults aged 21 years and above. 7p7 does not knowingly collect, process, or store personal data from any individual under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will immediately suspend the associated account, delete the data, and decline to process any related transactions.

If you are a parent or guardian and believe that your child has provided personal data to 7p7, please contact us immediately at [email protected] so that we can take prompt action.

9. Changes to This Policy

How we notify you of updates

7p7 reserves the right to update this Privacy Policy at any time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify registered account holders by email or via an in-Platform notification. We encourage you to review this Policy periodically to stay informed about how your data is being protected.

Your continued use of the Platform following publication of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should close your account and cease using the Platform.