7j7j Privacy Policy
Your Data, Protected.

This Privacy Policy ("Policy") describes how 7j7j ("the Company", "we", "us", "our") collects, uses, stores, protects, and shares personal data in connection with the operation of the online casino and sports betting platform available at https://7j7j.io ("the Platform"). The Policy applies to all visitors, registered players, and any other individuals who interact with the 7j7j Platform or its customer support services.

7j7j is committed to handling personal data responsibly and in accordance with applicable data protection principles. This Policy is written in plain English and is designed to give you a clear and complete picture of our data practices. Where technical or legal language is necessary, we have provided explanations to ensure the Policy remains accessible to all players across Bangladesh.

This Policy should be read alongside the 7j7j Terms & Conditions and Responsible Gaming Policy. Together, these documents form the complete framework governing your use of the Platform. In the event of any conflict between this Policy and the Terms & Conditions on a matter relating to personal data, this Policy shall take precedence.

For the purposes of this Policy, 7j7j acts as the data controller in respect of all personal data collected and processed through the Platform. As data controller, 7j7j determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out in accordance with applicable data protection law and the commitments set out in this Policy.

If you have any questions about how 7j7j processes your personal data, or if you wish to exercise any of your rights described in Section 10, please contact our Data Privacy team using the contact details set out in Section 13 of this Policy.

7j7j collects the following categories of personal data in connection with the operation of the Platform:

7j7j does not collect special categories of sensitive personal data (such as health data, religious beliefs, or political opinions) unless you voluntarily provide such information in the course of a responsible gaming self-assessment or a support interaction.

7j7j collects personal data through the following means:

• Direct provision by you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion, you directly provide us with personal data.
• Automated collection: When you use the Platform, technical and usage data is automatically collected through server logs, cookies, and similar tracking technologies. See Section 8 for details on cookies.
• Third-party sources: 7j7j may receive data from third-party identity verification providers (for KYC), payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and fraud detection services in connection with the processing of your account.

7j7j processes your personal data only where a valid legal basis exists. The following table sets out the primary purposes for which your data is processed and the corresponding legal basis:

Where processing is based on your consent (such as for marketing communications), you have the right to withdraw that consent at any time by contacting 7j7j support or updating your account notification preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

7j7j does not sell your personal data to any third party. We may share your data only in the following strictly defined circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank, to the extent necessary to process your financial transactions.
• Identity verification providers: Third-party KYC and age verification service providers engaged to confirm the identity and eligibility of players in accordance with our legal obligations.
• Game providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (such as session tokens) necessary to facilitate your gameplay. These providers operate under their own data protection policies.
• Fraud and security providers: Third-party fraud detection and cybersecurity services that assist 7j7j in monitoring for suspicious activity and protecting the integrity of the Platform.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory demand, 7j7j may disclose personal data to competent authorities.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of 7j7j's business, personal data may be transferred as part of that transaction, subject to the acquirer being bound by equivalent data protection obligations.

All third parties with whom 7j7j shares personal data are required to handle that data securely and in accordance with applicable data protection standards. 7j7j does not permit third-party service providers to use your data for their own independent marketing or commercial purposes.

7j7j retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data: Retained for the duration of your active account plus a minimum of five years following account closure, to meet legal and regulatory obligations.
• Financial and transaction data: Retained for a minimum of seven years from the date of the transaction in accordance with financial record-keeping requirements.
• KYC and identity verification data: Retained for the duration of the account plus five years following closure, or longer where required by applicable law.
• Customer support records: Retained for up to three years from the date of the last interaction, unless a longer period is required by ongoing dispute or legal proceedings.
• Technical and usage data (logs): Retained for up to 24 months from collection, after which data is aggregated and anonymised.
• Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter as evidence of the consent.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data is anonymised, it may be retained indefinitely for analytical purposes as it can no longer be attributed to an identifiable individual.

The 7j7j Platform uses cookies and similar tracking technologies to operate core platform functionality, remember your preferences, analyse usage patterns, and support security monitoring. The following categories of cookies are used:

• Strictly necessary cookies: Essential to the operation of the Platform. These cookies enable core functions such as session management, account authentication, and secure payment processing. They cannot be disabled without materially affecting the Platform's functionality.
• Functional cookies: Used to remember your preferences, language settings, and gameplay configurations to provide a more personalised experience.
• Analytical cookies: Used to collect anonymised data about how players navigate and use the Platform, enabling 7j7j to identify areas for improvement and optimise the user experience.
• Security cookies: Used to detect and prevent fraudulent activity, monitor for suspicious login attempts, and protect the integrity of player accounts.

7j7j does not use third-party advertising cookies or permit external ad networks to place cookies on the Platform. You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Continued use of the Platform following your first visit constitutes acceptance of the cookie practices described in this section.

7j7j implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and 7j7j servers.
• Encryption of sensitive data at rest, including payment details and identity documents.
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need can access personal data.
• Regular security audits and vulnerability assessments of the Platform infrastructure.
• Multi-factor authentication options available to players to protect their accounts.
• Automated fraud detection and account monitoring systems that flag suspicious activity in real time.
• Incident response procedures ensuring that data security incidents are identified, contained, and reported in a timely manner.

While 7j7j takes all reasonable precautions to secure your data, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your 7j7j account password and for notifying 7j7j immediately at [email protected] if you suspect any unauthorised access to your account.

As a player whose personal data is processed by 7j7j, you hold the following rights in respect of your data. To exercise any of these rights, please contact the 7j7j Data Privacy team using the details in Section 13.

7j7j will respond to all verified data rights requests within 30 calendar days of receipt. Where a request is complex or involves a high volume of data, this period may be extended by a further 60 days, in which case you will be notified of the extension and the reason for it. There is no charge for exercising your rights under normal circumstances.

The 7j7j Platform is strictly intended for adults aged 21 and above. 7j7j does not knowingly collect personal data from individuals under the age of 21. If you believe that a minor has registered an account or provided personal data to 7j7j without parental or guardian consent, please contact us immediately at [email protected].

Upon receiving a verified report or discovering internally that an account holder is under 21 years of age, 7j7j will immediately suspend the account, delete or anonymise all associated personal data to the extent permitted by legal obligations, and return any deposits made to the original payment source where technically feasible.

7j7j employs KYC age verification procedures on all accounts and reserves the right to request documentary proof of age at any time. Failure to provide satisfactory age verification will result in account suspension pending review.

7j7j reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players by email or by displaying a prominent notice on the Platform prior to the changes taking effect. The "Last updated" date at the top of this Policy will always reflect the date of the most recent revision.

We encourage you to review this Policy periodically to stay informed about how 7j7j protects your data. Your continued use of the Platform following the publication of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should discontinue use of the Platform and contact support to close your account.

Minor changes — such as corrections to typographical errors, clarifications that do not alter the substance of the Policy, or updates to contact details — may be made without prior notice. These will be reflected in the updated "Last updated" date.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 7j7j processes your personal data, please contact our Data Privacy team through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly on the Platform at https://7j7j.io — average response time under 2 minutes.
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).

When submitting a data rights request, please include your registered username or email address and a clear description of your request so that our team can locate your account and respond efficiently. For security purposes, 7j7j may need to verify your identity before processing certain requests.