Privacy Policy — How 7j7j Protects Your Data
At 7j7j, protecting the personal information of our registered players is a foundational commitment — not an afterthought. This Privacy Policy explains precisely what data we collect, why we collect it, how it is stored and secured, and what rights you hold as a data subject under our platform's privacy framework.
The cards below summarise 7j7j's core privacy commitments. The full legal text follows in each numbered section. Where any card summary and the full section text differ, the full section text governs.
7j7j collects only the personal data that is strictly necessary to operate your account, process your transactions, and comply with applicable anti-money laundering (AML) and Know Your Customer (KYC) requirements. We do not collect data speculatively.
All data transmitted between your device and 7j7j's servers is protected by 256-bit SSL/TLS encryption. Sensitive data at rest — including payment details and identity documents — is stored using AES-256 encryption on access-controlled infrastructure.
7j7j does not sell, rent, or trade your personal information to third-party advertisers, data brokers, or marketing networks. Your data is used exclusively to deliver and improve the 7j7j platform experience for you.
You have the right to access, correct, export, and request deletion of your personal data held by 7j7j. Requests are processed within 30 days. To exercise any right, contact our support team via live chat or email.
Data is shared with third parties only where necessary — such as payment processors (bKash, Nagad) and game providers — and only under binding data processing agreements that prohibit further onward sharing without 7j7j's explicit authorisation.
Personal data is retained only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Inactive account data is reviewed and purged on a rolling 24-month cycle unless a legal hold applies.
1 Data We Collect
When you interact with the 7j7j platform — from the moment you first visit the website through to active use of your registered account — certain categories of personal data are collected. This section sets out each category, the specific data points within it, and the reason that category is collected.
Registration & Identity Data
When you create a 7j7j account, we collect your full legal name, date of birth, residential address in Bangladesh, email address, and a valid Bangladesh mobile number. This information is used to create and identify your account, verify that you meet the 18+ eligibility requirement, and fulfil our KYC obligations.
Identity Verification Documents
As part of mandatory KYC verification, 7j7j may request copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence. Proof of address documents — such as a recent utility bill or bank statement — may also be requested. These documents are used solely for identity and age verification purposes and are stored in an encrypted document vault with strictly controlled access.
Financial & Transaction Data
For every deposit, withdrawal, and wager processed through your 7j7j account, we record the transaction amount in BDT, the payment method used (for example, bKash, Nagad, Rocket, or Visa), the transaction reference number, the timestamp in Bangladesh Standard Time (BST, UTC+6), and the resulting account balance. This data is essential for processing your transactions, investigating disputes, and complying with AML reporting requirements.
Technical & Device Data
When you access 7j7j, our servers automatically collect certain technical data including your IP address, device type and operating system, browser type and version, screen resolution, time zone setting, and referring URL. This data is used to ensure platform security, detect fraudulent access patterns, and improve the technical performance of the platform for players accessing from Bangladesh.
Behavioural & Usage Data
We collect data about how you interact with the 7j7j platform, including pages visited, games launched, time spent on each section, betting patterns, and features used. This data helps us improve the platform experience, personalise content recommendations, identify responsible gaming signals, and conduct internal analytics.
Data You Provide Voluntarily: If you contact 7j7j's support team via live chat or email, we retain the content of your messages, your account identifier, and the timestamps of your communications. This allows our team to maintain continuity in resolving your queries and to improve the quality of our support service over time.
Summary Table: Data Categories
| Category | Examples | Primary Purpose |
|---|---|---|
| Identity | Name, date of birth, address, mobile number | Account creation, KYC, eligibility verification |
| Verification Documents | NID, passport scan, proof of address | Age and identity verification, AML compliance |
| Financial | Transaction amounts, payment method, wallet balance | Payment processing, dispute resolution, AML |
| Technical | IP address, device type, browser, OS | Security, fraud detection, platform optimisation |
| Behavioural | Pages visited, games played, session duration | Platform improvement, responsible gaming monitoring |
| Communications | Support chat logs, email correspondence | Query resolution, service quality improvement |
2 How We Use Your Data
7j7j processes personal data only where a lawful basis exists for doing so. The lawful bases we rely on are: performance of a contract (your account agreement with us), compliance with a legal obligation, our legitimate interests as a platform operator, and — where required — your explicit consent. The table below maps each processing activity to its lawful basis.
Core Platform Operations
Your registration data, financial data, and device data are used to operate your 7j7j account on a day-to-day basis. This encompasses processing deposits and withdrawals via bKash, Nagad, Rocket, and other supported methods, calculating and crediting your account balance, maintaining your betting history, delivering game content from our third-party studio partners, and enforcing the 18+ age restriction that applies to all 7j7j accounts.
Security & Fraud Prevention
Technical and behavioural data are used to detect and prevent unauthorised account access, identify suspicious betting patterns that may indicate match-fixing or bonus abuse, flag transactions that trigger AML review thresholds, and protect the integrity of game outcomes. 7j7j uses automated systems for initial fraud screening; where an automated flag is raised, a human compliance team member reviews the case before any account action is taken.
Responsible Gaming Monitoring
Behavioural data — including session length, deposit frequency, loss rates, and changes in wagering patterns — is used by 7j7j's responsible gaming team to identify players who may be experiencing gambling-related harm. Where our systems identify a risk pattern, we may contact the player to offer responsible gaming tools, including deposit limits, cool-off periods, or self-exclusion. Processing for this purpose is carried out in the player's vital interest and is a core part of our commitment to safe gambling for all players in Bangladesh.
Communications & Marketing
With your consent, 7j7j may use your email address and mobile number to send you promotional communications about new bonuses, cricket betting markets (including BPL and T20 World Cup fixtures), new game releases from our studio partners, and seasonal offers tied to events such as Eid and Pohela Boishakh. You may withdraw consent for marketing communications at any time by contacting support or using the unsubscribe link in any marketing email. Withdrawal of marketing consent does not affect the processing of your data for core platform operations.
Legal & Regulatory Compliance
Certain processing activities are carried out because 7j7j is legally required to do so. These include retaining transaction records for AML audit purposes, responding to lawful requests from competent authorities, maintaining age verification records, and producing reports required under applicable financial crime prevention frameworks.
3 Cookies & Tracking Technologies
7j7j uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to analyse how players use the site. This section explains each category of cookie in use and how you can manage your preferences.
Strictly Necessary Cookies
These cookies are essential for the 7j7j platform to operate. They maintain your logged-in session, remember your account region (Bangladesh), store your currency preference (BDT), and preserve items in your active bet slip. Without these cookies, core platform functions cannot work. They are set automatically when you access 7j7j and cannot be disabled without breaking the platform.
Analytical & Performance Cookies
These cookies collect anonymised information about how visitors use the 7j7j platform — for example, which game categories attract the most engagement, which pages have the highest exit rates, and how long players spend on the cricket betting section. This data is used in aggregate form to improve platform performance and prioritise development resources. No individual player is identified through analytical cookies.
Functional Cookies
Functional cookies remember choices you have made to personalise your experience, such as your preferred language (English), the last game category you browsed, and your notification preferences. These cookies do not track your activity across third-party websites and expire at the end of your session or after a defined period.
Managing Cookie Preferences
You can manage non-essential cookie categories through your browser settings. Most modern browsers allow you to block or delete cookies, set preferences per site, and receive notifications when a cookie is set. Please note that disabling certain functional cookies may affect your experience on the 7j7j platform. Instructions for managing cookies in major browsers are available through each browser's official help documentation.
No Cross-Site Advertising Trackers: 7j7j does not embed third-party advertising network trackers or social media pixel tags on its platform. We do not participate in retargeting advertising programmes that follow you across the internet after visiting 7j7j. The only third-party scripts active on the platform are those directly related to game delivery and payment processing, each operating under a data processing agreement with 7j7j.
4 Data Sharing & Third Parties
7j7j does not sell or rent your personal data to any third party. Data is shared externally only in the limited circumstances described below, and always subject to contractual safeguards that require the recipient to process your data only for the specified purpose and to protect it to a standard equivalent to 7j7j's own security practices.
Payment Service Providers
To process your deposits and withdrawals in BDT, 7j7j shares the necessary transaction data with your chosen payment provider. For mobile money transactions, this includes bKash, Nagad, Rocket, and Upay. For card transactions, data is shared with the relevant card network (Visa or Mastercard) and the acquiring bank. For bank transfer transactions, data is shared with the relevant institution — which may include Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank depending on your selection. Each payment provider is bound by their own regulatory obligations and by a data processing agreement with 7j7j.
Game Content Providers
The games available on 7j7j — including live dealer tables and slot machines — are delivered by certified third-party studio partners such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe. To load and operate games within your session, a session token and anonymised player identifier are shared with the relevant provider. No personal identity data (such as your name or NID number) is shared with game providers as part of normal game delivery.
Identity Verification Services
7j7j works with specialist KYC and identity verification service providers to process and authenticate identity documents submitted during account verification. These providers have access to your identity documents only for the duration of the verification process and are contractually prohibited from retaining, using, or sharing your documents for any other purpose.
Legal Authorities
7j7j may disclose your personal data to competent governmental, regulatory, or law enforcement authorities where required to do so by applicable law, court order, or lawful regulatory request. In such cases, 7j7j will disclose only the minimum data necessary to satisfy the legal obligation and will, where legally permitted, notify you of the disclosure.
Important: 7j7j will never share your personal data with third parties for their own independent marketing or advertising purposes. If you receive unsolicited communications claiming to be from 7j7j that ask for your account credentials or payment details, treat these as fraudulent and contact our support team immediately. 7j7j will never ask for your password via email, SMS, or live chat.
5 Data Security
7j7j implements a layered security architecture to protect your personal data against unauthorised access, loss, alteration, or disclosure. The following measures form the core of our data security programme.
Encryption in Transit and at Rest
All data transmitted between your browser or app and 7j7j's servers is encrypted using TLS 1.3 with 256-bit cipher suites. Certificate pinning is applied on native mobile clients to prevent man-in-the-middle attacks. Sensitive data stored on our servers — including identity documents, payment credentials, and account authentication data — is encrypted at rest using AES-256 encryption with access keys managed through a hardware security module (HSM).
Access Controls
Access to production systems and player data is restricted to authorised 7j7j personnel on a strict need-to-know basis. All internal access is governed by role-based access controls (RBAC), requires multi-factor authentication, and is logged for audit purposes. No employee has standing access to unencrypted payment credentials or identity document images — access to these data categories requires an additional authorisation step with supervisor approval.
Infrastructure Security
7j7j's platform is hosted on enterprise-grade cloud infrastructure with redundant data centres, continuous intrusion detection systems, and automated vulnerability scanning. Regular penetration testing is conducted by independent third-party security firms. Critical security patches are applied within 24 hours of release; non-critical patches are applied within the standard monthly maintenance window.
Player-Side Security Responsibilities
While 7j7j takes all reasonable technical measures to protect your data, you also play an important role in keeping your account secure. You should use a strong, unique password for your 7j7j account, enable two-factor authentication (2FA) via your registered Bangladesh mobile number, never share your login credentials with any other person, and log out of your account when accessing 7j7j from a shared or public device. If you suspect your account has been compromised, contact 7j7j's support team immediately.
Data Breach Response
In the unlikely event of a personal data breach affecting your account, 7j7j's incident response team will take immediate steps to contain the breach, assess the scope and severity, and notify affected players by email within 72 hours of becoming aware of the breach. Notification will include a description of the data affected, the likely consequences of the breach, and the steps 7j7j is taking to address it.
6 Data Retention
7j7j retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply to the main data categories we hold.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account Registration Data | Duration of account + 5 years post-closure | AML/KYC legal obligation |
| Identity Verification Documents | Duration of account + 5 years post-closure | Regulatory compliance, fraud prevention |
| Transaction Records | 7 years from transaction date | Financial record-keeping, AML audit trail |
| Responsible Gaming Records | Duration of account + 5 years post-closure | Duty of care, self-exclusion enforcement |
| Technical / Log Data | 13 months from collection | Security monitoring, fraud investigation |
| Support Communications | 3 years from last interaction | Service continuity, dispute evidence |
| Marketing Consent Records | Until consent is withdrawn + 3 years | Proof of consent basis for marketing |
| Analytical / Behavioural Data | 24 months, then anonymised or deleted | Platform improvement (anonymised after 24 months) |
Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Where a legal hold is in place — for example, because data is subject to an ongoing regulatory investigation or legal proceeding — the relevant data will be retained until the hold is formally lifted, after which the standard deletion process applies.
Account Closure and Data Deletion
When you request account closure, your account is deactivated and access to the platform is revoked. Your personal data is not immediately deleted — it is retained for the periods specified in the table above to satisfy our legal obligations. You will receive a written acknowledgement of your closure request by email within two business days. If you wish to confirm the status of your data following account closure, contact our support team.
7 Your Privacy Rights
As a registered player on the 7j7j platform, you hold a defined set of rights in relation to the personal data we hold about you. These rights are described below along with guidance on how to exercise each one. All rights requests are processed free of charge and within 30 calendar days of receipt, unless the request is complex or numerous, in which case the period may be extended by a further 30 days with prior notice to you.
Right of Access
You have the right to obtain confirmation of whether 7j7j holds personal data about you, and if so, to receive a copy of that data together with information about the purposes for which it is processed, the categories of data held, and the recipients to whom it has been disclosed. To make an access request, contact our support team via live chat or email, providing your registered account details for identity verification.
Right to Rectification
If any personal data held by 7j7j is inaccurate or incomplete, you have the right to request that it be corrected. For standard account data such as your email address or mobile number, corrections can be made directly through your account settings. For identity-verified data such as your registered name or date of birth, a formal rectification request with supporting documentation must be submitted to the support team.
Right to Erasure
In certain circumstances, you may request the deletion of your personal data. This right applies where the data is no longer necessary for the purpose it was collected, where you withdraw the consent on which processing was based, or where processing was unlawful. This right does not apply where 7j7j is required to retain data to comply with a legal obligation — for example, transaction records subject to AML retention requirements cannot be deleted on request.
Right to Restrict Processing
You may request that 7j7j restricts the processing of your data in specific circumstances — for example, while the accuracy of data you have disputed is being verified, or where you have objected to processing based on legitimate interests and the outcome of the objection assessment is pending. Where processing is restricted, your data may still be stored but will not be actively processed except with your consent or for the establishment or defence of legal claims.
Right to Data Portability
Where processing is based on your consent or on a contract with you, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format (such as CSV or JSON), and to have it transmitted directly to another controller where technically feasible.
Right to Object to Marketing
You have an unconditional right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of an objection to marketing, 7j7j will cease all marketing communications within five business days. This right can be exercised by contacting support, using the unsubscribe link in any marketing email, or adjusting your notification preferences in your account settings.
How to Exercise Your Rights: To submit any privacy rights request, contact 7j7j's data team via live chat or at [email protected]. Please include your registered account username and a brief description of your request. We will ask you to verify your identity before processing the request to ensure that we do not disclose data to an unauthorised person.
8 Policy Updates & Contact
7j7j reviews this Privacy Policy periodically to reflect changes in our data processing practices, applicable legal requirements, and the evolution of the platform. The effective date displayed at the top of this page and in the hero section above indicates when the current version entered force.
How We Notify You of Changes
Where a change to this Privacy Policy is material — meaning it significantly affects how your personal data is collected, used, shared, or retained — we will notify all registered players by email to their registered address at least fourteen (14) calendar days before the change takes effect. Non-material changes, such as typographical corrections, clarifications, or restructuring of existing content without substantive change, may take effect immediately. The updated policy will always be accessible at https://7j7j.app/privacy-policy.
Children's Privacy
The 7j7j platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that an account was registered by a person under 18, the account will be immediately suspended, all personal data associated with it will be flagged for deletion in accordance with our data retention procedures, and any funds held will be returned to the verified payment source. If you believe a minor has registered an account on 7j7j, please contact our support team immediately.
Links to Other Sites
The 7j7j platform does not contain links to third-party websites for general browsing purposes. All links within the platform point to internal pages within the 7j7j domain. Where third-party game content is embedded within the platform, the game provider's own privacy practices apply to data processed within the game environment — please refer to the relevant provider's privacy documentation for details.
Contact Us About Privacy
If you have a question about this Privacy Policy, wish to exercise a privacy right, or have a concern about how 7j7j handles your personal data, please contact our support team. We aim to respond to all privacy-related enquiries within three business days.
Contact: [email protected] — available 24/7 via live chat for urgent privacy concerns.
Responsible Gaming Reminder: 7j7j is committed to safe and responsible gambling. All players must be 18 years or older. If gambling is causing concern, use the self-exclusion and deposit limit tools available in your account, or contact our responsible gaming team immediately via live chat. Further information is available on our Responsible Gaming page.
Our support team is available around the clock to address any privacy concern, process a data access request, or help you manage your account settings. You can also explore the FAQ for quick answers, review our Terms & Conditions for your full account agreement, or head to the casino to enjoy our full game library. 18+ only. Play responsibly.