Your Privacy Matters — The 7u7u Privacy Policy

1 Introduction

1.1 7u7u ("we", "us", "our") is committed to protecting the privacy and personal data of all individuals who visit, register with, or use the 7u7u online gaming platform at https://7u7u.io ("the Platform"). This Privacy Policy sets out our practices with respect to the collection, use, storage, and disclosure of personal data.

1.2 This Privacy Policy applies to all personal data collected through the Platform, including data provided during account registration, payment transactions, customer support interactions, and general use of the Platform's games and betting services.

1.3 This Privacy Policy should be read alongside the 7u7u Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a privacy-related matter, this Privacy Policy shall prevail.

1.4 The data controller responsible for your personal data is 7u7u, operated by an internationally licensed gaming entity. For any privacy-related enquiries, please contact our Data Protection team at [email protected].

2 Personal Data We Collect

2.1 7u7u collects several categories of personal data in the ordinary course of operating the Platform. The table below summarises the categories of data we collect and the primary context in which each is collected:

2.2 Where we ask you to provide personal data that is mandatory for a particular purpose (such as identity verification), we will indicate this clearly. Failure to provide mandatory data may prevent us from opening or maintaining your account or processing transactions.

2.3 We do not intentionally collect special categories of sensitive personal data (such as health data, racial or ethnic origin, political opinions, or religious beliefs). If you voluntarily disclose any such information in the course of a customer support interaction, we will handle it with heightened care and will not use it for any purpose beyond resolving the immediate matter.

3 How We Collect Your Data

3.1 Directly from you: The majority of personal data we hold is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in promotions.

3.2 Automatically through your use of the Platform: When you access or use the 7u7u Platform, we automatically collect Technical Data and Usage Data through server logs, cookies, and similar technologies. This data is collected regardless of whether you are logged in to an account.

3.3 From payment service providers: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a card network, the relevant payment provider transmits transaction confirmation data to 7u7u including transaction reference numbers, timestamps, and partial account identifiers necessary to reconcile the payment.

3.4 From identity verification partners: Where we use a third-party KYC verification service to authenticate your identity documents, that provider will share the result of the verification check (pass/fail and any risk flags) with 7u7u. We do not receive or retain raw biometric data generated by third-party verification tools.

3.5 From fraud prevention and analytics services: We may receive aggregated risk signals or device fingerprint data from fraud-prevention service providers to help protect the Platform against fraudulent account creation and payment fraud. This data is used solely for security purposes.

4 Legal Basis for Processing Your Data

4.1 7u7u processes your personal data on the following legal bases, depending on the specific processing activity involved:

• Contract performance: Processing that is necessary to provide you with the services described in our Terms & Conditions — including account management, payment processing, game delivery, and customer support — is carried out on the basis that it is necessary for the performance of our contract with you.
• Legal obligation: Processing required to comply with applicable laws and regulations — including anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, responsible gambling regulations, and tax reporting requirements — is carried out on the basis of legal obligation.
• Legitimate interests: Processing carried out for fraud prevention, platform security, internal analytics, and improvement of the Platform's functionality is based on our legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications (including promotional emails, SMS offers, and bonus notifications) is carried out on the basis of your consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

4.2 Where we rely on legitimate interests as the legal basis for processing, we carry out a balancing test to ensure that our interests do not override your right to privacy. You may request information about any such balancing test by contacting us at [email protected].

5 How We Use Your Personal Data

5.1 7u7u uses the personal data we collect for the following specific purposes:

• Account creation and management: To register your account, maintain your player profile, manage your preferences, and provide access to all platform features;
• Identity verification (KYC): To verify your identity and age (21+) in compliance with our legal obligations and to prevent underage gambling and fraudulent account creation;
• Payment processing: To process deposits via bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard; to process withdrawals to your verified payment method; and to maintain accurate financial records;
• Game and betting service delivery: To operate casino games, live dealer tables, sports betting markets, and all other interactive features of the Platform;
• Responsible gaming: To monitor gaming patterns for indicators of problem gambling; to enforce deposit limits, cooling-off periods, and self-exclusion orders you have set; and to fulfil our obligations under applicable responsible gaming frameworks;
• Fraud and security: To detect, investigate, and prevent fraudulent activity, multi-accounting, collusion, money laundering, and any other prohibited conduct as defined in our Terms & Conditions;
• Customer support: To respond to enquiries, complaints, and support requests submitted via live chat, email, or WhatsApp;
• Legal and regulatory compliance: To comply with applicable laws, court orders, regulatory requests, and reporting obligations;
• Marketing (with consent): To send you promotional offers, bonus notifications, seasonal promotions (such as Eid bonus credits and BPL season offers), and platform updates — only where you have provided consent to receive such communications;
• Platform improvement: To analyse aggregated, anonymised usage data to improve the performance, navigation, and feature set of the 7u7u Platform.

5.2 We will not use your personal data for any purpose that is incompatible with the purposes described in this section without first providing you with notice and, where required, obtaining your consent.

6 Sharing Your Personal Data

6.1 7u7u does not sell, rent, or trade your personal data to any third party for their own independent commercial purposes. We share personal data only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive only the transaction data necessary to process deposits and withdrawals on your behalf;
• KYC and identity verification providers: Third-party verification services receive the identity documents and data you submit during the KYC process solely for the purpose of verifying your identity. These providers are bound by strict data-processing agreements;
• Game providers: Providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a pseudonymous player session token and stake/win data necessary to operate the games. They do not receive your full name, contact details, or financial account data;
• Fraud prevention services: We may share Technical Data (such as IP address and device identifiers) with fraud-prevention providers to detect and prevent prohibited activity on the Platform;
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, financial intelligence units, tax authorities, or other competent regulatory bodies where required by applicable law, court order, or regulatory direction;
• Professional advisers: Legal counsel, auditors, and compliance consultants engaged by 7u7u may access personal data on a strictly need-to-know basis and are bound by professional confidentiality obligations.

7 Cookies and Tracking Technologies

7.1 7u7u uses cookies and similar technologies (collectively "cookies") on the Platform. Cookies are small text files stored on your device that allow us to recognise your browser across sessions, maintain your login state, and gather anonymised usage analytics.

7.2 We use the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function correctly. These include session cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cannot be disabled without severely impairing Platform functionality;
• Functional cookies: Remember your preferences (such as preferred language, currency display, and game lobby layout) to provide a personalised experience across sessions;
• Analytics cookies: Collect anonymised data about how players navigate the Platform (pages visited, time on page, click paths) to help us improve usability. We use privacy-respecting analytics tools and do not share raw analytics data with advertising networks;
• Fraud-detection cookies: Assign a pseudonymous device identifier to help our fraud prevention systems detect multi-accounting and automated bot activity.

7.3 We do not use third-party advertising cookies or tracking pixels that follow you across websites unrelated to 7u7u. We do not participate in cross-site behavioural advertising networks.

7.4 Most browsers allow you to control cookies through their settings. You may choose to block or delete cookies; however, doing so may affect the functionality of the Platform, including your ability to stay logged in. Please consult your browser's help documentation for instructions on managing cookies.

7.5 In addition to cookies, we may use web beacons (tiny transparent images embedded in pages or emails) to confirm that a page was loaded or that a marketing email was opened. Web beacons do not collect personal data beyond what is already tracked by server logs.

8 Data Security

8.1 7u7u implements a multi-layered security framework to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the 7u7u Platform;
• AES-256 encryption for sensitive data stored at rest on our servers;
• Role-based access controls ensuring that only authorised personnel with a legitimate need-to-know basis can access personal data;
• Two-factor authentication (OTP) for player accounts and administrative systems;
• Regular penetration testing and vulnerability assessments carried out by independent security professionals;
• 24/7 intrusion detection and monitoring of server infrastructure;
• Strict third-party vendor security assessment as a condition of engagement.

8.2 In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, 7u7u will notify affected players without undue delay and will take all reasonable steps to mitigate the harm caused by the breach.

8.3 While 7u7u takes every reasonable precaution to protect your data, no internet transmission or electronic storage system is completely secure. We therefore encourage you to use a strong, unique password for your 7u7u account, to enable two-factor authentication, and to contact us immediately at [email protected] if you suspect any unauthorised access to your account.

9 Data Retention

9.1 7u7u retains personal data for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. The following retention periods apply as a general guide:

9.2 At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

9.3 Where a legal hold is in place — for example, in connection with ongoing litigation, a regulatory investigation, or a law enforcement request — we will retain the relevant data beyond the standard retention period until the hold is lifted.

10 Your Privacy Rights

10.1 Subject to applicable law and certain exceptions, you have the following rights in relation to your personal data held by 7u7u:

• Right of access: You may request a copy of all personal data we hold about you, together with information about how and why we process it;
• Right to rectification: You may request that we correct any inaccurate or incomplete personal data we hold about you. For basic account data (name, email, phone number), you can update this directly in your account settings;
• Right to erasure ("right to be forgotten"): In certain circumstances — for example, where we no longer need the data for the purpose for which it was collected and no legal retention obligation applies — you may request that we delete your personal data;
• Right to restriction of processing: You may request that we restrict our use of your data in certain circumstances, for example while you contest the accuracy of the data or object to our processing of it;
• Right to data portability: Where processing is based on consent or contract performance and carried out by automated means, you may request that we provide your data in a structured, machine-readable format;
• Right to object: You may object to processing based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for legal claims;
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without penalty. Withdrawal does not affect the lawfulness of prior processing.

10.2 To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request — [Your Account Username]". We will acknowledge receipt within 5 business days and provide a substantive response within 30 calendar days. For complex or high-volume requests, this period may be extended by a further 30 days, in which case we will notify you of the extension.

10.3 We may need to verify your identity before processing a data rights request. This is to protect you against fraudulent requests made by third parties claiming to act on your behalf.

11 Children and Minors

11.1 21+ The 7u7u Platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. Our registration process includes age verification steps specifically designed to prevent minors from accessing the Platform.

11.2 If we become aware that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete all personal data associated with that account without retention (except to the minimum extent required by applicable law to evidence the violation), and if appropriate, notify the relevant authorities.

11.3 If you are a parent or guardian and believe that a person under 21 in your care has registered on the 7u7u Platform, please contact us immediately at [email protected]. We will investigate and take prompt action.

12 International Data Transfers

12.1 7u7u is operated by an entity incorporated and licensed outside Bangladesh. As a result, some of the personal data you provide may be transferred to, stored on, or processed on servers located outside the People's Republic of Bangladesh.

12.2 Where personal data is transferred internationally, 7u7u takes appropriate measures to ensure that the transfer is lawful and that your data receives a level of protection equivalent to or exceeding the protection it would receive under Bangladeshi law. Such measures include contractual data protection clauses, adequacy assessments, and vendor security reviews.

12.3 Game provider servers (including those operated by Pragmatic Play, Evolution Gaming, and Ezugi) are located in multiple international jurisdictions. Personal data shared with game providers is limited to the pseudonymous session data described in Section 6 and does not include full identity or financial account data.

13 Third-Party Links

13.1 The 7u7u Platform does not contain links to third-party websites. All navigation on the Platform remains within the https://7u7u.io domain. This Privacy Policy applies solely to data processed by 7u7u in connection with the Platform and does not extend to any external website or service.

13.2 Game providers' game interfaces are embedded within the 7u 7u Platform under a secure iframe arrangement. While the game content is served by the provider, your interaction data is captured and processed by 7u7u in accordance with this Privacy Policy. The game provider receives only the session token and stake/outcome data as described in Section 6.

14 Marketing Communications

14.1 With your consent, 7u7u may send you marketing communications about promotions, bonuses, new game releases, seasonal offers (such as Eid bonus credits, Pohela Boishakh special events, and BPL season promotions), and platform updates. These communications may be delivered via email, SMS, or in-platform notification.

14.2 You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link included in any marketing email we send you;
• Updating your communication preferences in your account settings under "Notifications";
• Sending a written opt-out request to [email protected] with the subject line "Marketing Opt-Out — [Your Account Username]".

14.3 Opting out of marketing communications will not affect the delivery of transactional messages that are necessary for the operation of your account, such as deposit confirmations, withdrawal notifications, account security alerts, and mandatory responsible gaming communications.

14.4 We do not send marketing communications to players who have activated a self-exclusion or cooling-off period. Where a player has indicated a concern about problem gambling through interaction with our responsible gaming tools, all bonus-related marketing is suspended for that player regardless of their general marketing preferences.

15 Changes to This Privacy Policy

15.1 7u7u reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the features of the Platform. The "Last updated" date at the top of this document will be revised accordingly whenever a material change is made.

15.2 Where a change to this Privacy Policy is material — meaning it significantly affects how we collect, use, or share your personal data, or affects your rights — we will notify you at least 14 calendar days in advance via email to the address registered on your account and via a prominent in-platform notice. Continued use of the Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the revised terms.

15.3 If you do not agree with any material change to this Privacy Policy, you may close your account before the change takes effect by contacting our support team at [email protected]. Account closure will be processed in accordance with Section 9 (Data Retention) and the applicable provisions of the 7u7u Terms & Conditions.

15.4 Prior versions of this Privacy Policy are archived and available on request by contacting [email protected].

16 Contact Us

16.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the way 7u7u handles your personal data, please contact our Data Protection team using any of the following channels:

• Email: [email protected] — please use the subject line "Privacy Enquiry — [Your Account Username]" for the fastest response;
• Live Chat: Available 24/7 inside the Platform from your account dashboard;
• WhatsApp: +880 1700-000000 — available 08:00–24:00 Bangladesh Standard Time (UTC+6).

16.2 We aim to respond to all privacy-related enquiries within 5 business days. Formal data rights requests (access, erasure, rectification, etc.) will be acknowledged within 5 business days and substantively resolved within 30 calendar days as described in Section 10.