Your Privacy Matters at 7baji — Here Is Exactly How We Protect It

1 Data We Collect

7baji collects personal data from players in Bangladesh through several channels: directly when you register an account or contact support, automatically when you browse and use the platform, and from third-party identity verification and payment processing partners. The categories of data we collect are as follows:

Identity and Registration Data: When you create a 7baji account, we collect your full legal name, date of birth, gender (optional), residential address, email address, and mobile phone number. This information is required to open your account, verify your identity, and communicate with you about your account activity.

KYC Verification Documents: Before processing your first withdrawal, we collect copies of your government-issued photo identification (National ID card or passport) and proof of residential address (utility bill, bank statement, or similar). These documents are used exclusively for identity verification and anti-money-laundering compliance. They are stored in encrypted form and access is restricted to authorised compliance personnel only.

Financial Data: We collect details of the payment methods you use to deposit and withdraw funds — including your bKash, Nagad, Rocket, or Upay account numbers, and partial card details for Visa and Mastercard transactions (we never store full card numbers). We also retain a full record of all deposit, withdrawal, and bonus transactions on your account for regulatory and audit purposes.

Betting and Gaming History: We maintain a complete record of all bets placed, games played, outcomes, and account balance movements. This data is used to settle bets, calculate bonuses, detect fraud, and fulfil responsible gaming obligations.

Technical and Device Data: When you access 7baji, we automatically collect your IP address, device type, operating system, browser type and version, screen resolution, time zone setting, and session timestamps. We also collect details of pages visited, features used, and referring URLs. This data helps us maintain platform security, diagnose technical issues, and understand how players use the site.

Communications Data: If you contact our support team — whether by email, live chat, or any other channel — we retain a record of that correspondence, including the content of messages and any attachments provided.

2 How We Use Your Data

7baji uses the personal data we collect for the following specific purposes. We rely on one or more legal bases for each purpose, as described below:

• Account Management: To create and maintain your player account, authenticate your identity at login, and communicate essential account notices. Legal basis: performance of contract.
• Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank channels, and to maintain accurate financial records. Legal basis: performance of contract and legal obligation.
• Identity Verification (KYC): To verify that you are who you say you are, that you are at least 18 years of age, and that your account is not being used for money laundering or fraud. Legal basis: legal obligation.
• Fraud Prevention and Security: To monitor account activity for signs of fraudulent behaviour, bonus abuse, multi-accounting, and other policy violations. Legal basis: legitimate interests of 7baji and its players.
• Responsible Gaming: To identify players who may be experiencing gambling-related harm, to apply account restrictions at the player's request, and to fulfil our responsible gaming obligations. Legal basis: legal obligation and legitimate interests.
• Customer Support: To respond to your enquiries, resolve disputes, and improve the quality of our support service. Legal basis: performance of contract and legitimate interests.
• Marketing Communications: To send you promotional offers, bonus announcements, and platform updates — but only if you have opted in to receive such communications. You may opt out at any time. Legal basis: consent.
• Platform Improvement: To analyse aggregated usage patterns and improve the design, performance, and game selection of the 7baji platform. This analysis uses anonymised or pseudonymised data wherever possible. Legal basis: legitimate interests.

3 Cookies and Tracking Technologies

7baji uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain session security, and understand how players navigate the site. The following categories of cookies are used:

Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, store your language preference, and enable core security features such as CSRF protection. Because they are strictly necessary, they cannot be disabled without breaking platform functionality.

Performance and Analytics Cookies: These cookies collect anonymised information about how players use the 7baji platform — which pages are visited most frequently, where players encounter errors, and how long sessions typically last. This data is used exclusively to improve platform performance. No personally identifiable information is included in these analytics reports.

Functional Cookies: These cookies remember your account preferences — such as your preferred deposit method, last visited game category, and notification settings — so that you do not need to re-enter them each visit.

Third-Party Game Provider Cookies: Some games embedded in the 7baji platform are delivered by third-party studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These providers may set their own cookies to operate their game software. 7baji does not control the cookie practices of third-party game providers. Please refer to the relevant provider's own privacy documentation for details.

You may manage or disable non-essential cookies through your browser settings at any time. Please be aware that disabling certain cookies may affect the functionality of the 7baji platform. We do not currently respond to browser "Do Not Track" signals, as there is no universally accepted standard for how such signals should be interpreted.

4 Data Sharing and Disclosure

7baji does not sell, rent, or trade your personal data to any third party. However, we do share data with a limited set of trusted partners and authorities where necessary to operate the platform or fulfil legal obligations. All third-party recipients of your data are bound by strict confidentiality obligations.

Payment Processors: To process your deposits and withdrawals, we share the minimum necessary financial data with payment processing partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card network providers (Visa, Mastercard). These providers operate under their own privacy policies and are responsible for data shared with them in connection with your transactions.

Identity Verification Partners: We use third-party KYC verification services to cross-check the identity documents you submit. These partners process your data solely for the purpose of verifying your identity and are prohibited from using it for any other purpose.

Game Software Providers: When you play a game delivered by a third-party studio (such as Evolution Gaming, Pragmatic Play, or Spribe), your gameplay data — including bet amounts and outcomes — is shared with that provider to operate and settle the game. This data does not include your full name, payment details, or KYC documents.

Legal and Regulatory Authorities: 7baji may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so — for example, in connection with a court order, anti-money-laundering investigation, or regulatory audit. We will notify you of any such disclosure unless doing so is prohibited by law or would compromise an ongoing investigation.

Business Transfers: In the event that 7baji or any part of its business is acquired, merged, or transferred to another entity, your personal data may form part of the transferred assets. We will notify affected players in advance of any such transfer and ensure that the acquiring entity is bound by privacy standards at least equivalent to those in this policy.

5 Data Security Measures

Protecting your personal data is a core operational priority at 7baji. We implement a layered security architecture designed to prevent unauthorised access, accidental loss, and unlawful disclosure of your information. Key security measures include:

• Encryption at Rest: All personal data stored on 7baji servers — including KYC documents, account details, and transaction records — is encrypted using AES-256 symmetric encryption. Encryption keys are managed separately from the data they protect and are rotated on a regular schedule.
• Encryption in Transit: All data transmitted between your browser or device and the 7baji platform is protected using TLS 1.3. Older, less secure protocol versions (TLS 1.0, TLS 1.1, SSL) are disabled across all 7baji services.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Staff members who do not require access to personal data as part of their job function are denied access. All data access events are logged and audited regularly.
• Password Security: Player passwords are stored as salted cryptographic hashes — plain-text passwords are never stored or logged by 7baji. We enforce minimum password complexity requirements and encourage the use of unique, strong passwords for your 7baji account.
• Infrastructure Monitoring: Our platform infrastructure is monitored continuously for anomalous activity, intrusion attempts, and denial-of-service attacks. Automated alerting systems notify our security team immediately when suspicious activity is detected.
• Third-Party Security Assessments: 7baji undergoes periodic security assessments by independent third-party providers to identify and remediate vulnerabilities. Critical findings are addressed within defined service-level timeframes.

Despite these measures, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that affects your personal data, 7baji will notify you within a reasonable timeframe and provide clear guidance on the steps you should take to protect yourself.

6 Data Retention

7baji retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or to comply with applicable legal and regulatory obligations. The following retention periods apply:

• Active Account Data: For as long as your account remains active and for a period of five years following permanent account closure, to satisfy anti-money-laundering recordkeeping requirements.
• KYC Documents: For a minimum of five years following the date of the last transaction on your account, in line with standard financial compliance obligations. After this period, documents are securely destroyed.
• Transaction Records: For a minimum of five years from the date of each transaction, for audit and dispute resolution purposes.
• Support Correspondence: For two years from the date of the most recent communication in a given support thread, unless the correspondence is relevant to an unresolved dispute or legal matter.
• Technical and Device Logs: For a maximum of 90 days, after which logs are deleted or anonymised. Logs associated with a specific security investigation may be retained for longer if necessary to complete that investigation.
• Marketing Consent Records: For the duration of your account and for two years following account closure, as evidence of the consent you provided (or withdrew) for marketing communications.

When the applicable retention period expires, personal data is either permanently deleted from our systems or irreversibly anonymised so that it can no longer be associated with you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical and business intelligence purposes.

7 Your Rights Over Your Data

As a 7baji player in Bangladesh, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our data team at [email protected]. We will acknowledge your request within five business days and complete it within 30 days, unless the request is complex or involves a large volume of data, in which case we will inform you of any extension.

We will not charge a fee for handling any data rights request unless the request is manifestly unfounded, repetitive, or excessive, in which case we reserve the right to charge a reasonable administrative fee or to decline the request. We will inform you in advance if a fee applies.

If you are unsatisfied with our response to any data rights request, you have the right to escalate your complaint to the relevant data protection authority in Bangladesh or any other jurisdiction in which you are resident.

8 Changes to This Privacy Policy

7baji reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform operations. When we make material changes to this policy, we will update the "Effective Date" at the top of this document and, where practicable, notify active account holders via the email address registered to their 7baji account.

We encourage you to review this Privacy Policy periodically — particularly if you are considering sharing additional personal information with us or exercising any of your data rights. Your continued use of the 7baji platform following publication of a revised Privacy Policy constitutes your acknowledgement of the changes.

Where a proposed change would materially reduce your privacy protections or introduce new uses of your data that require your consent, we will seek that consent before the change takes effect. You will always have the option to close your account if you do not agree to a revised policy.

The current version of this Privacy Policy is always available at https://7baji.net/privacy-policy. For questions or concerns about this policy or your data, contact us at [email protected]. Our support team operates on Bangladesh Standard Time (BST, UTC+6) and responds to privacy-related enquiries within two business days.