Privacy Policy — 7jjj Data Protection

01 Introduction

7jjj is Bangladesh's leading online casino and sports betting platform, serving adult players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. We are committed to protecting the privacy and personal data of every individual who interacts with our platform, whether as a registered player or an anonymous visitor.

This Policy applies to all personal data collected through the 7jjj website at 7jjj.io, our mobile-optimised web app, our customer support channels, and any other touchpoint through which we interact with you. It covers data collected automatically (such as device and browser information) as well as data you actively provide (such as your name, date of birth, and payment details).

We take data protection seriously. Our systems, processes, and staff practices are designed to keep your information safe, use it only for legitimate purposes, and give you meaningful control over what we hold. This Policy is written in plain English so that every player — wherever they are in Bangladesh — can understand exactly how their data is handled.

02 Data Controller

For the purposes of this Privacy Policy, 7jjj acts as the data controller — meaning we determine the purposes and means by which your personal data is processed. Where we engage third-party service providers (such as payment processors or game suppliers) to process data on our behalf, those parties act as data processors under our instruction and are bound by contractual data-processing agreements that require them to maintain the same standard of data protection that we apply ourselves.

If you have any questions about data controllership, wish to exercise your data rights, or want to lodge a complaint, you can contact us using the details in Section 15 of this Policy.

03 Data We Collect

We collect personal data through several channels. The categories of data we may hold about you are described below.

• Full legal name as it appears on your government-issued ID
• Date of birth (used to verify you are 21 years of age or older)
• Bangladesh National ID Card (NID) number or passport number
• Residential address in Bangladesh
• Valid email address used for account correspondence
• Bangladesh mobile phone number (used for account verification and two-factor authentication)

• bKash, Nagad, Rocket, or Upay mobile wallet numbers linked to your account
• Bank account or card details used for deposits and withdrawals (stored in tokenised form only)
• Deposit and withdrawal history, including amounts in BDT, timestamps, and method used
• Bonus and promotional credit history

• Games played, bet amounts, wagering history, and session durations
• Sports betting selections, odds accepted, and settlement outcomes
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated, self-exclusion requests)
• Bonus eligibility and wagering requirement progress

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Session timestamps, page views, and navigation paths on 7jjj.io
• Cookie identifiers and similar tracking technologies (see Section 7)

• Records of live chat conversations with our support team
• Email correspondence sent to or received from [email protected]
• Responses to surveys, promotions, or feedback requests
• Complaints and formal dispute records

04 How We Use Your Data

The personal data we collect is used for the following specific and documented purposes:

05 Legal Basis for Processing

We process your personal data only where we have a valid legal basis to do so. The legal bases we rely on are:

• Contractual Necessity: Processing required to perform the contract between you and 7jjj — including operating your account, processing bets, and managing payments.
• Legal Obligation: Processing required to comply with applicable laws — including AML obligations, age verification requirements, and the retention of financial records.
• Legitimate Interests: Processing for purposes such as fraud prevention, platform security, responsible gaming monitoring, and improving our services — where those interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications, non-essential cookies, and analytics tracking — where you have given explicit, informed, and freely withdrawable consent.

Where we rely on consent as our legal basis, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

06 Data Sharing & Third Parties

7jjj does not sell or rent your personal data to any third party. We may share your data with the following categories of trusted partners, strictly on a need-to-know basis and under binding data-processing agreements:

• Game Content Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios receive anonymised session tokens to deliver their game content. They do not receive your full identity data.
• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and our banking partners receive the minimum financial data necessary to process your deposits and withdrawals. All payment data is tokenised.
• Identity Verification Services: KYC providers may receive copies of your identity documents (NID, passport) for the purpose of verifying your age and identity prior to withdrawal processing.
• Cloud Infrastructure Providers: Our hosting and data storage infrastructure providers may process data on our behalf as part of platform operations. All infrastructure is secured to industry standards.
• Legal & Regulatory Authorities: We may be required by law, court order, or regulatory directive to disclose personal data to relevant authorities. We will always seek legal advice before complying with such requests and will notify you where legally permitted to do so.
• Fraud Prevention & AML Services: We may share data with specialist fraud-detection and AML screening providers where we have a legitimate interest in preventing financial crime.

07 Cookies & Tracking Technologies

7jjj uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain session security, and — with your consent — to analyse how players interact with the site so that we can improve the experience.

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. They cannot be disabled.
• Preference Cookies: Remember your settings such as preferred language, display mode, and responsible gaming tool configurations.
• Analytics Cookies: Collect anonymised data about page visits, session durations, and navigation patterns to help us improve platform performance and content relevance. These are only set with your consent.
• Marketing Cookies: Used to deliver relevant promotional content about 7jjj games and offers. Only set with your explicit consent and can be withdrawn at any time.

You can manage your cookie preferences at any time via your browser settings. Disabling non-essential cookies will not prevent you from accessing the core platform features, but may affect the personalisation of your experience.

08 Data Security

The security of your personal data is a primary operational concern at 7jjj. We implement a layered set of technical and organisational security measures to protect your data against unauthorised access, loss, destruction, or alteration:

• All data in transit is encrypted using TLS 1.3 / 256-bit SSL. This applies to every page on 7jjj.io, including account pages, payment forms, and support channels.
• Sensitive data at rest — including payment credentials and identity documents — is encrypted using AES-256 encryption in our database layer.
• Access to production systems and personal data is strictly role-based. Only authorised 7jjj personnel with a documented business need can access player records, and all access is logged and audited.
• We conduct regular security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Two-factor authentication (2FA) is available to all players and is actively encouraged as an additional layer of account security at every 7jjj login.
• In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected players promptly and take immediate remediation steps.

09 Data Retention

We retain your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

Once the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked back to you as an individual.

10 Your Data Rights

As a 7jjj player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving your request.

• Right of Access: You may request a copy of all personal data we hold about you, along with information on how it is used and with whom it is shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to our legal retention obligations described in Section 9.
• Right to Restriction of Processing: You may ask us to suspend the processing of your data in certain circumstances — for example, while we investigate a rectification request or a complaint.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You may object at any time to processing based on our legitimate interests, including profiling. You also have an unconditional right to object to direct marketing at any time.
• Right to Withdraw Consent: Where we rely on your consent as the legal basis for processing, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right Not to Be Subject to Automated Decisions: You have the right not to be subject to decisions based solely on automated processing — including profiling — that produce significant legal or similarly significant effects on you, without human review.

We will not charge a fee for handling data rights requests in ordinary circumstances. We reserve the right to charge a reasonable administrative fee for requests that are manifestly unfounded or excessive in nature, or to decline to act on such requests.

11 Children & Minors

The 7jjj platform is strictly intended for adult players aged 21 years and above. We do not knowingly collect, store, or process personal data belonging to individuals under the age of 21. Age verification is a mandatory step in our registration and KYC process.

If we discover or are notified that we have inadvertently collected personal data from a person under the age of 21, we will immediately suspend the associated account, delete the data in question, and — where applicable — refund any deposits held. If you believe a minor has registered on the 7jjj platform, please notify us immediately at [email protected].

12 International Data Transfers

Some of our third-party service providers — particularly cloud infrastructure providers and game content studios — may be located outside Bangladesh. Where personal data is transferred internationally, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

Safeguards we rely on for international transfers include:

• Binding contractual data-processing agreements that impose data protection obligations on the recipient equivalent to those applied by 7jjj.
• Transfer only to jurisdictions that maintain an adequate level of data protection as assessed by recognised international standards.
• Encryption of all data in transit using TLS 1.3, regardless of the destination jurisdiction.

You may request information about the specific safeguards applicable to any particular international transfer by contacting us at [email protected].

13 Third-Party Links

The 7jjj platform may contain references to third-party game providers and payment services. While we take care to work only with reputable partners, we are not responsible for the privacy practices or content of third-party websites or services that are accessed independently of the 7jjj platform.

This Policy applies solely to data collected by 7jjj directly via the 7jjj.io platform. When you interact with a third-party service — such as initiating a payment via the bKash or Nagad app on your device — that interaction is governed by the privacy policy of the respective third party. We encourage you to review the privacy policies of any third-party services you use in connection with your 7jjj account.

14 Policy Updates

7jjj reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, platform functionality, or our data processing practices. When material changes are made, we will update the "Last Updated" date at the top of this Policy and, where practicable, notify registered players via email or an in-platform notification.

Your continued use of the 7jjj platform after any amendment takes effect constitutes your acknowledgement of the revised Policy. If you do not agree with the updated Policy, you must cease using the platform and may request account closure by contacting our support team.

We recommend bookmarking this page and reviewing it periodically. Archived versions of previous Privacy Policies are available upon written request to our support team at [email protected].

15 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which 7jjj handles your personal data, please contact our Data Protection team through any of the following channels:

• Email: [email protected] — use the subject line "Privacy Enquiry" or "Data Rights Request" for faster routing.
• Live Chat: Available 24/7 via the in-platform chat widget. Response time target: under 3 minutes.
• WhatsApp: +880 1700 000 000 — available between 08:00 and 24:00 BST (UTC+6).
• Response Language: English. Our support team handles privacy queries from players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

We take all privacy complaints seriously. Upon receiving a formal complaint, we will acknowledge receipt within 3 business days and aim to provide a full written response within 30 calendar days. Where a complaint is complex or requires further investigation, we will keep you informed of progress at regular intervals.

If you are not satisfied with our response to your complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.