Privacy Policy — How 7uj7 Collects, Uses, and Safeguards Your Personal Data
At 7uj7, the privacy and security of every player's personal information is a foundational commitment. This Privacy Policy explains precisely what data we collect, why we collect it, how we use it, who we share it with, and what rights you have over your own information.
Six Principles That Guide How 7uj7 Handles Your Data
Our approach to data privacy is built around transparency, minimal collection, and your control. Here is a plain-English summary of our core commitments.
7uj7 collects only the personal data that is strictly necessary for account registration, identity verification, payment processing, and regulatory compliance. We do not collect data speculatively or for purposes beyond what is described in this policy.
7uj7 does not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes. Your data is used exclusively to deliver, improve, and protect the 7uj7 platform and your experience on it.
All data transmitted between your device and 7uj7 servers is protected by industry-standard TLS/SSL encryption. This ensures that your personal details, payment information, and account credentials cannot be intercepted in transit.
You have the right to access, correct, and request deletion of your personal data held by 7 uj7. We honour all valid data rights requests promptly and without undue restriction. Submit a request at any time by contacting [email protected].
Personal data is held only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Once the retention period expires, data is securely deleted or anonymised in line with our Data Retention Policy.
7uj7 will only send you promotional communications if you have opted in to receive them. You may withdraw your marketing consent at any time by updating your account preferences or contacting support. Opting out does not affect transactional or account-related messages.
Personal Data We Collect
1.1 Data You Provide Directly
When you register a 7uj7 account, interact with the platform, or contact support, you voluntarily provide us with certain personal data. The categories of data collected at each stage are as follows:
- Account Registration: Full legal name, date of birth, residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar), email address, and mobile phone number registered in Bangladesh.
- Identity Verification (KYC): Copies of government-issued identification documents such as your National Identity Card (NID), passport, or driving licence; proof of address documents such as utility bills or bank statements; and, where required, selfie photographs for liveness verification.
- Payment Information: Mobile wallet account references (bKash, Nagad, Rocket, Upay), bank account details for bank transfer methods (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), and card numbers (last four digits only — 7uj7 does not store full card numbers) for Visa and Mastercard transactions.
- Support Communications: The content of messages you send to our support team via email, chat, or any other channel, including any attachments you provide.
- Survey and Feedback Data: Responses you provide when participating in player satisfaction surveys, promotions, or voluntary feedback forms.
1.2 Data Collected Automatically
When you access the 7uj7 platform, certain technical data is collected automatically by our systems. This data is necessary to deliver a stable, secure, and personalised experience and includes:
- Device and Browser Data: Device type, operating system, browser type and version, screen resolution, and device language settings.
- Network Data: IP address, approximate geolocation derived from IP address, internet service provider (ISP) name, and connection type.
- Usage and Behavioural Data: Pages visited, time spent on each page, game sessions started and completed, bet amounts, game preferences, navigation paths, and session duration.
- Transaction Logs: A complete record of all deposit and withdrawal transactions, bet placements, bonus activations, and account balance changes, with timestamps in Bangladesh Standard Time (BST, UTC+6).
- Cookie and Tracking Data: As described in Section 4 of this policy.
1.3 Data We Do Not Collect
7uj7 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond liveness verification where required for KYC), or health data, unless you voluntarily disclose such information in a support communication. If such data is incidentally received, it will not be processed for any purpose and will be deleted at the earliest opportunity.
Data Categories Summary
Identity Data — Name, DOB, NID
Contact Data — Email, phone, address
Financial Data — Payment method refs
Technical Data — IP, device, browser
Usage Data — Sessions, bets, navigation
Communications — Support messages
Why KYC Is Required
Identity verification is required to prevent underage gambling, detect fraud, comply with anti-money laundering obligations, and ensure that withdrawals reach the correct account holder. KYC documents are stored securely and accessed only by authorised verification personnel.
How We Use Your Data
2.1 Primary Purposes
7uj7 processes your personal data for the following primary purposes, each of which has a lawful basis under applicable data protection principles:
| Purpose | Lawful Basis | Data Used |
|---|---|---|
| Account creation and management | Contract performance | Identity, contact data |
| Identity verification (KYC) | Legal obligation | Identity documents, selfie |
| Processing deposits and withdrawals | Contract performance | Financial, identity data |
| Fraud detection and prevention | Legitimate interest | Technical, usage, financial data |
| Anti-money laundering compliance | Legal obligation | Identity, financial, transaction data |
| Customer support delivery | Contract performance | Contact data, communications |
| Responsible gaming monitoring | Legal obligation / legitimate interest | Usage data, session data |
| Platform improvement and analytics | Legitimate interest | Usage data, technical data |
| Promotional communications | Consent | Contact data, preferences |
2.2 Responsible Gaming Monitoring
7uj7 uses automated analysis of your session and betting data to identify patterns that may indicate problem gambling behaviour — such as extended play sessions, rapid successive deposits, or increasing bet sizes. Where such patterns are detected, our responsible gaming team may make contact to offer support resources. This processing is conducted in your interest and in fulfilment of our responsible gaming obligations.
2.3 Personalisation
With your consent, 7uj7 may use your game history, preferred payment methods, and browsing behaviour on the platform to personalise your experience — for example, by surfacing cricket betting markets relevant to BPL or T20 World Cup matches, recommending slot titles similar to those you have enjoyed, or presenting promotions that match your play profile. You may opt out of personalisation at any time via your account settings.
2.4 Legal and Regulatory Compliance
7uj7 may be required by law, court order, or regulatory authority to process and disclose certain personal data. In such cases, processing will be limited to what is strictly required to comply with the legal obligation. 7uj7 will notify you of any such disclosure where permitted to do so by applicable law.
Your Marketing Preferences
You control whether 7uj7 contacts you for promotional purposes. Marketing communications may include:
- Bonus and promotion offers
- New game announcements
- Cricket and sports betting tips
- Seasonal offers (Eid, BPL season, etc.)
- Loyalty and VIP programme updates
To opt out at any time, email [email protected] with subject "Marketing Opt-Out".
Data Sharing and Third Parties
3.1 Service Providers
7uj7 engages a limited number of carefully selected third-party service providers to support the operation of the platform. These providers are permitted to process your personal data only to the extent necessary to deliver the specific service for which they have been engaged, and are contractually bound to maintain the confidentiality and security of your data. Categories of service provider include:
- Payment Processing Partners: Mobile wallet operators (bKash, Nagad, Rocket, Upay) and card payment networks (Visa, Mastercard) receive the minimum transaction data required to process deposits and withdrawals securely.
- KYC and Identity Verification Providers: Specialist identity verification technology providers who process submitted identity documents and, where applicable, conduct liveness checks on your behalf.
- Game Content Providers: Game studios and live casino operators such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session identifiers necessary to deliver game content. These providers do not receive your full personal profile.
- Cloud Infrastructure and Hosting Providers: Secure cloud hosting partners who store platform data in encrypted, access-controlled server environments.
- Analytics Providers: Technology vendors who process aggregated, anonymised usage data to help 7uj7 understand platform performance and improve user experience.
- Anti-Fraud and Risk Management Vendors: Specialist providers who assist in detecting and preventing fraudulent account activity, money laundering, and bonus abuse.
3.2 Legal Disclosures
7uj7 may disclose personal data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts where required to do so by applicable law, a binding court order, or a lawful regulatory request. 7uj7 will not comply with informal or unverified requests for player data and will seek legal advice where the lawfulness of any request is uncertain.
3.3 Business Transfers
In the event that 7uj7 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, 7uj7 will notify affected players in advance and ensure that the receiving entity is bound by privacy obligations no less protective than those set out in this policy.
3.4 No Sale of Data
For absolute clarity: 7uj7 does not sell, rent, license, or otherwise transfer your personal data to any third party for that party's own marketing, advertising, data brokerage, or commercial profiling purposes. This prohibition applies without exception.
Data Processor Standards
All third-party data processors engaged by 7uj7 are subject to written data processing agreements that require them to: process data only on 7uj7's documented instructions; implement appropriate technical and organisational security measures; and not engage sub-processors without 7uj7's prior written consent.
International Transfers
Some of 7uj7's service providers operate data infrastructure outside Bangladesh. Where personal data is transferred internationally, 7uj7 ensures that appropriate safeguards — including standard contractual clauses or equivalent protections — are in place before the transfer occurs.
Data Security Measures
5.1 Technical Safeguards
7uj7 implements a multi-layered security architecture to protect your personal data from unauthorised access, alteration, disclosure, or destruction. Technical measures in place include:
- TLS 1.3 encryption for all data in transit between your device and 7uj7 servers;
- AES-256 encryption at rest for all stored personal data and financial records;
- Web application firewall (WAF) protection against common attack vectors including SQL injection, cross-site scripting (XSS), and DDoS attacks;
- Intrusion detection and prevention systems (IDS/IPS) monitoring network traffic in real time;
- Secure, access-controlled server infrastructure with physical and logical access restrictions;
- Regular automated vulnerability scanning and periodic penetration testing by qualified security professionals.
5.2 Organisational Safeguards
In addition to technical controls, 7uj7 enforces organisational security measures including strict role-based access controls (RBAC) ensuring that employees access only the personal data necessary for their specific job function. All personnel with access to personal data are subject to confidentiality obligations and undergo data protection training. Access logs are maintained and reviewed regularly.
5.3 Data Breach Response
In the event of a personal data breach that poses a risk to your rights and freedoms, 7uj7 will notify affected players without undue delay. The notification will describe the nature of the breach, the categories and approximate number of individuals affected, the likely consequences, and the measures taken or proposed to address the breach. 7uj7 maintains a documented incident response plan that is reviewed and tested regularly.
5.4 Your Responsibility
While 7uj7 takes all reasonable technical and organisational measures to protect your data, the security of your account also depends on you. You are responsible for keeping your login credentials confidential, using a strong and unique password, enabling two-factor authentication where available, and notifying 7uj7 immediately at [email protected] if you suspect any unauthorised access to your account.
Security Standards
Encryption in Transit: TLS 1.3
Encryption at Rest: AES-256
Infrastructure: WAF + IDS/IPS
Access Control: Role-based (RBAC)
Testing: Regular pen-testing
Suspected Breach?
If you believe your 7uj7 account has been accessed without your permission, contact us immediately at [email protected]. We will investigate and, if confirmed, suspend the compromised account and assist you with re-securing access.
Data Retention Policy
6.1 Retention Periods
7uj7 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | Legal and AML compliance |
| KYC identity documents | Duration of account + 5 years post-closure | Anti-money laundering obligations |
| Transaction records | 7 years from transaction date | Financial record-keeping requirements |
| Support communications | 3 years from last interaction | Dispute resolution reference |
| Usage and analytics data | 24 months from collection | Platform improvement analysis |
| Marketing consent records | Until consent is withdrawn + 1 year | Evidence of lawful marketing basis |
| Self-exclusion records | Minimum 7 years | Responsible gaming compliance |
6.2 Secure Deletion
Upon expiry of the applicable retention period, personal data is either securely deleted from all 7uj7 systems using data-wiping techniques that prevent recovery, or is irreversibly anonymised such that it can no longer be associated with any individual. Anonymised data may be retained indefinitely for aggregate statistical analysis.
6.3 Account Closure and Data
Closing your 7uj7 account does not result in the immediate deletion of all personal data. Data will be retained for the periods specified in the table above, principally to comply with anti-money laundering and financial record-keeping requirements. You may request confirmation of what data is held about you at any point by exercising your access rights as described in Section 7.
Why We Keep Data After Closure
Anti-money laundering regulations and financial record-keeping obligations require 7uj7 to retain account and transaction records for several years after an account is closed. This is a legal requirement, not a commercial choice. Retained data is held in restricted-access archives and is not used for any active processing purpose during the retention period.
Your Privacy Rights
7.1 Right of Access
You have the right to request a copy of all personal data that 7uj7 holds about you. Upon receiving a verified access request, 7uj7 will provide a structured summary of the data held, the purposes for which it is processed, the categories of recipients with whom it has been shared, and the anticipated retention period. Access requests are fulfilled within 30 days of receipt.
7.2 Right to Rectification
If any personal data held by 7uj7 is inaccurate or incomplete, you have the right to request that it be corrected. For account registration data such as your name, address, or contact details, you may update some fields directly within your account profile. For KYC documents and other data that cannot be self-edited, submit a rectification request to [email protected].
7.3 Right to Erasure
You have the right to request the deletion of your personal data where: the data is no longer necessary for the purpose for which it was collected; you have withdrawn the consent on which processing was based and there is no other lawful basis; or the data has been unlawfully processed. Erasure requests are subject to applicable legal retention obligations — data that must be retained under AML or financial record-keeping law cannot be deleted until the mandatory retention period has expired.
7.4 Right to Restrict Processing
You may request that 7uj7 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed. During a restriction period, 7uj7 will store the data but will not actively process it for any purpose other than storage.
7.5 Right to Object
You have the right to object to processing based on legitimate interests, including profiling for personalisation purposes. Where you object, 7uj7 will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defence of legal claims. You may also object at any time to the processing of your data for direct marketing purposes, and this objection will be honoured without qualification.
7.6 Right to Data Portability
Where processing is based on your consent or on contract performance, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format (such as JSON or CSV). You may also request that 7uj7 transmit this data directly to another service provider where technically feasible.
7.7 How to Exercise Your Rights
To exercise any of the rights described above, submit a written request to [email protected] with the subject line "Data Rights Request". Please include your registered email address and a brief description of the right you wish to exercise. 7uj7 may ask you to verify your identity before processing the request. All requests are handled within 30 calendar days. If a request is complex or involves a large volume of data, we may extend this period by a further 30 days with prior notice.
7.8 Complaints
If you believe that 7uj7 has processed your personal data in a manner that violates applicable data protection principles, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction. Before doing so, we encourage you to contact us directly at [email protected] so that we have the opportunity to address your concern promptly and informally.
Rights at a Glance
Access — Get a copy of your data
Rectification — Correct inaccurate data
Erasure — Request deletion
Restriction — Pause processing
Objection — Stop legitimate-interest processing
Portability — Export your data
Submit a Rights Request
Email [email protected] with subject line "Data Rights Request". Include your registered email address and specify which right you are exercising. We respond within 30 calendar days.
Changes to This Privacy Policy
8.1 How We Notify You of Changes
7uj7 reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, new product features, evolving legal requirements, or feedback from players. When a material change is made to this policy, 7uj7 will notify registered players by email to the address associated with their account, and will display a prominent notice on the platform for a minimum of 14 days following the update.
8.2 Minor Updates
For minor, non-material updates — such as typographical corrections, clarifications that do not alter the substantive meaning of any provision, or updates to contact information — 7uj7 may amend the policy without issuing a proactive notification. The "Effective Date" shown at the top of this policy will always reflect the date of the most recent revision. We encourage you to review this policy periodically to stay informed about how your data is protected.
8.3 Continued Use as Acceptance
Your continued use of the 7uj7 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised policy, you should discontinue use of the platform and contact [email protected] to close your account and request the deletion of your personal data to the extent permitted by applicable retention obligations.
8.4 Version History
7uj7 maintains an internal version history of all prior Privacy Policy versions. If you require access to a previous version of this policy — for example, to understand what terms were in effect during a specific period — you may request it by emailing [email protected] with the subject line "Privacy Policy Version Request" and the approximate date you are inquiring about.
Policy Effective Date
This Privacy Policy was last reviewed and updated on 1 January 2026. Material changes will be communicated to registered players by email at least 7 days before taking effect. The current version is always available at 7uj7.net/privacy-policy.
Questions About Your Privacy?
Our support team is available around the clock to help you understand your data rights and how 7uj7 protects your information.
Read Our FAQ Login to 7uj7