7jata Privacy Policy

1 Who We Are

7jata operates the online betting and casino platform accessible at https://7jata.io (the "Platform"). For the purposes of this Privacy Policy, 7jata acts as the data controller in respect of the personal data of all registered users and visitors to the Platform. As data controller, 7jata determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully, fairly and transparently.

7jata is a platform designed specifically for the Bangladesh market. All customer support, communications and account interactions are conducted in English. Our primary contact for data protection enquiries is: [email protected] (plain text — not a clickable link).

2 Data We Collect

7jata collects the following categories of personal data about you, depending on your interaction with the Platform:

• Identity Data: Full legal name, date of birth, nationality, and identity document details (national identity card, passport or driving licence number) collected during account registration and KYC verification.
• Contact Data: Email address, mobile phone number, and residential address including city, district and division within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh).
• Financial Data: Mobile wallet references for bKash, Nagad, Rocket and Upay; bank account name and partial account details for Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank and other supported institutions; and a full record of all deposit and withdrawal transactions on your account.
• Technical Data: IP address, device identifier, operating system, browser type and version, time-zone setting, and session log timestamps.
• Usage Data: Information about how you interact with the Platform, including pages visited, games played, bets placed, session duration, in-page click patterns and navigation paths.
• Marketing & Communications Data: Your preferences for receiving promotional communications from 7jata, and a record of whether you have opted in to or out of such communications.
• Support & Correspondence Data: The content of any support tickets, live chat transcripts, emails or other written communications you send to 7jata.

You are not required to provide all of the above categories to access the Platform as a visitor. However, certain categories — particularly Identity Data, Contact Data and Financial Data — are mandatory for account registration and the processing of deposits and withdrawals. Failure to provide mandatory data will prevent you from registering or using financial services on the Platform.

3 How We Collect Your Data

7jata collects personal data through the following means:

• Direct interactions: Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, play a casino game, claim a promotional offer, or contact our support team.
• Automated technologies: Technical Data and Usage Data collected automatically when you access or use the Platform, via cookies, server logs, pixel tags and similar tracking technologies. See Section 7 for full details on our use of cookies.
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay and card payment gateways when you initiate a deposit or withdrawal. 7jata receives transaction reference numbers and status confirmations; full payment credential data is processed by the payment provider and not shared with 7jata.
• Identity verification partners: Where 7jata uses a third-party KYC provider to verify your identity documents, that provider will return a verification status and a reference ID to 7jata. The underlying document image is processed by the KYC provider under their own privacy policy and is not retained on 7jata's servers beyond the verification process.
• Publicly available sources: In limited circumstances, 7jata may cross-reference identity information against publicly available databases for fraud prevention or sanctions screening purposes.

4 Legal Basis for Processing

7jata processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to perform the contract between you and 7jata — for example, processing your identity data to create an account, processing financial data to execute deposits and withdrawals, and processing usage data to settle bets correctly.
• Legal obligation: Processing required to comply with applicable law — for example, retaining transaction records and identity verification data for anti-money laundering (AML) and Know Your Customer (KYC) purposes.
• Legitimate interests: Processing for the legitimate business interests of 7jata that are not overridden by your data protection rights — for example, processing technical and usage data to detect fraud, maintain platform security, improve service quality and monitor responsible gaming indicators.
• Consent: Processing based on your freely given, specific, informed and unambiguous consent — for example, sending you promotional emails or SMS messages about bonuses and new games. You may withdraw consent for marketing communications at any time by contacting [email protected] or by using the unsubscribe option included in every marketing message.

5 How We Use Your Data

7jata uses the personal data it collects for the following purposes:

• Account management: Creating and administering your registered account, verifying your identity and age (21+ requirement), processing login and session authentication, and managing account settings and preferences.
• Transaction processing: Executing deposit requests via bKash, Nagad, Rocket, Upay and supported banks; processing withdrawal requests; maintaining a complete and accurate transaction history for your account; and investigating disputed transactions.
• Betting and gaming services: Recording bets placed, settling outcomes across cricket, football, kabaddi, casino and other markets, and maintaining a complete bet history accessible from your account dashboard.
• KYC and compliance: Verifying your identity, confirming your age, screening against sanctions lists, and complying with applicable AML and fraud prevention obligations.
• Customer support: Responding to your enquiries, resolving complaints, processing self-exclusion and responsible gaming requests, and maintaining records of support interactions.
• Responsible gaming: Monitoring your usage patterns to identify potential indicators of problem gambling and, where appropriate, proactively offering responsible gaming tools including deposit limits, time-outs and self-exclusion options.
• Platform security: Detecting and preventing fraud, identifying suspicious login activity, blocking multiple accounts, and maintaining the integrity of betting and gaming markets.
• Platform improvement: Analysing aggregated usage data to understand which features are used most frequently, identify technical issues and improve the overall player experience.
• Marketing communications: Sending you information about promotions, bonuses, new games and seasonal offers (such as Eid, Pohela Boishakh or BPL season promotions) — only where you have provided consent to receive such communications.

7jata will not use your personal data for any purpose that is incompatible with the purposes for which it was originally collected, unless we have obtained your consent or are required to do so by law.

6 Data Sharing & Third Parties

7jata shares your personal data with third parties only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa and Mastercard — to process deposits and withdrawals on your behalf. These providers act as independent data controllers in respect of payment credential data.
• KYC and identity verification providers: Third-party services used to verify the identity documents you submit during account verification. These providers are contractually bound to use your data only for identity verification purposes.
• Game content providers: Studios including Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, NetEnt and Spribe may receive a session token and anonymised player identifier to initialise and authenticate your game session. These providers do not receive your full identity or financial data.
• Analytics providers: Anonymised and aggregated usage data may be shared with analytics platforms to support platform performance monitoring and improvement. No personally identifiable information is included in data shared for analytics purposes.
• Legal and regulatory authorities: Where 7jata is required to disclose data by court order, regulatory requirement, law enforcement request or other legal obligation, it will comply with such obligations and, where legally permitted, will notify you of the disclosure.
• Business transfers: In the event of a merger, acquisition or sale of all or part of 7jata's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and given the opportunity to request deletion of your data prior to its transfer, subject to legal retention requirements.

7 Cookies & Tracking Technologies

7jata uses cookies and similar tracking technologies on the Platform. The following types of cookies are in use:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies, security tokens and load-balancing cookies. These cookies cannot be disabled without impairing the functionality of the Platform.
• Functional cookies: Used to remember your preferences, such as your preferred language, display settings and last-logged-in state. Disabling these cookies will not prevent you from using the Platform but may result in a less personalised experience.
• Analytics cookies: Used to collect anonymous, aggregated data about how visitors use the Platform — such as which pages are visited most frequently and how long sessions last. This data is used solely for internal performance monitoring and product improvement.

7jata does not use third-party advertising cookies, retargeting pixels or cross-site tracking technologies that follow you across other websites after you leave the Platform.

You can manage and delete cookies through your browser settings at any time. Please refer to your browser's help documentation for instructions. Note that disabling strictly necessary cookies will prevent you from logging in and using core Platform features.

8 Data Retention

7jata retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting or reporting requirements. The following retention periods apply:

• Account and identity data: Retained for the duration of your account registration and for a period of 5 years following permanent account closure, to satisfy AML and KYC record-keeping obligations.
• Transaction and financial records: Retained for a minimum of 5 years from the date of the relevant transaction, in accordance with financial record-keeping requirements.
• Bet history and gaming records: Retained for 2 years from the date of the relevant bet or game round, and for an additional period as required to resolve any outstanding disputes.
• Support correspondence: Retained for 2 years from the date of the final communication in a support interaction.
• Technical and usage logs: Retained for a rolling 12-month period and then permanently deleted or anonymised.
• Marketing data: Retained until you withdraw consent for marketing communications, at which point your contact details will be moved to a suppression list to ensure that no further marketing is sent.

When personal data is no longer required and the applicable retention period has expired, 7jata will securely delete or anonymise that data in a manner that prevents reconstruction or re-identification.

9 Data Security

7jata implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and our servers.
• Encryption at rest for all databases containing personal and financial data.
• Strict role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required to perform their job function.
• Multi-factor authentication required for all staff access to systems containing personal data.
• Regular third-party penetration testing and vulnerability assessments of the Platform's infrastructure.
• A documented incident response plan that includes procedures for containing breaches, assessing impact and notifying affected users within a defined timeframe.
• Regular staff training on data protection obligations and secure data handling practices.

10 Your Rights

As a data subject, you hold the following rights in respect of the personal data that 7jata processes about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request":

• Right of access: You have the right to request a copy of the personal data 7jata holds about you, along with information about how it is being used and with whom it has been shared.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data be corrected or updated. For certain data points (such as your name and contact details), you may be able to make corrections directly through your account dashboard.
• Right to erasure: You have the right to request that 7jata delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. This right is subject to 7jata's legal data retention obligations, which may require certain data to be retained for a defined period even after a deletion request is received.
• Right to restrict processing: You have the right to request that 7jata restrict processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing based on legitimate interests.
• Right to data portability: Where processing is based on consent or contractual necessity, you have the right to receive a copy of the personal data you have provided to 7jata in a structured, commonly used and machine-readable format.
• Right to object: You have the right to object at any time to processing of your personal data for direct marketing purposes. You also have the right to object to processing based on legitimate interests, on grounds relating to your particular situation.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

7jata will respond to all data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, and you will be notified of the extension and the reason for it within the initial 30-day period.

11 Children & Minors

The 7jata Platform is strictly intended for adults aged 21 and above. 7jata does not knowingly collect, process or retain personal data relating to individuals under the age of 21. During registration, all users are required to confirm that they are at least 21 years of age, and 7jata conducts age verification checks as part of the KYC process.

If 7jata discovers or is informed that it has inadvertently collected personal data from an individual under the age of 21, it will immediately close the relevant account, delete all associated personal data (subject to any mandatory retention obligations relating to the detection of underage gambling), and where appropriate refer the matter to relevant authorities.

Parents and guardians who believe that a minor may have registered on the Platform are encouraged to contact us immediately at [email protected]. We treat all such reports with the highest priority.

12 Cross-Border Data Transfers

7jata's primary operations and data storage infrastructure are designed to serve the Bangladesh market. In certain circumstances, personal data may be processed by or transferred to service providers located outside Bangladesh — for example, cloud infrastructure providers, game content studios or identity verification platforms operating in other jurisdictions.

Where personal data is transferred internationally, 7jata ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law. These safeguards may include contractual data processing agreements incorporating standard data protection clauses, or transfers to organisations that maintain equivalent data protection standards to those observed by 7jata.

13 Changes to This Policy

7jata reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our privacy programme. When material changes are made to this Policy, registered users will be notified via email and/or a prominent notice on the Platform no fewer than 14 days before the changes take effect.

The "Last updated" date at the top of this page will always reflect the date on which the most recent version of the Privacy Policy came into effect. We encourage you to review this page periodically to remain informed of how 7jata protects your personal data. Your continued use of the Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

14 Contact & Data Requests

If you have any questions, concerns or complaints about this Privacy Policy, or if you wish to exercise any of your data rights as described in Section 10, please contact the 7jata data protection team using the following contact details:

• Email: [email protected] — please use the subject line "Privacy Policy Enquiry" or "Data Rights Request" so that your message is directed to the correct team promptly.
• Response time: We aim to acknowledge all privacy-related enquiries within 2 business days (Bangladesh Standard Time, UTC+6) and to provide a full response within 30 calendar days.
• Postal correspondence: Where a formal written request is required, please indicate this in your initial email and we will provide a correspondence address for your specific request type.

If you are not satisfied with 7jata's response to your privacy enquiry or data rights request, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. 7jata is committed to working cooperatively with supervisory authorities to resolve any outstanding concerns.