7baji Privacy Policy — How We Collect, Use, and Protect Your Personal Data

7baji is an internationally licensed online gaming platform operating a cricket sportsbook, live casino, slots, crash games, and bingo services. The platform is operated by 7baji and its affiliated entities (collectively referred to in this policy as "7baji", "we", "us", or "our"). 7baji acts as the data controller in respect of the personal data of its registered account holders and website visitors.

This Privacy Policy governs the collection, use, storage, and disclosure of personal data in connection with your use of the 7baji website and all associated services. By registering an account on 7baji or by continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy.

7baji collects personal data across several categories, each of which is described below. We collect only what is necessary for the stated purposes. We do not collect sensitive categories of data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where specifically required for responsible gaming assessments and only with your explicit consent.

Identity Data includes your full legal name as it appears on your government-issued identification, your date of birth, your national identity number (NID) or passport number, and any additional verification documents submitted during KYC review. This data is required to confirm your eligibility to use the platform and to comply with our anti-money laundering obligations.

Contact Data includes your email address, mobile phone number, and the city or district in Bangladesh where you reside. This data is used to communicate with you about your account, send transactional notifications, and provide customer support.

Financial Data includes your mobile wallet number (bKash, Nagad, Rocket, or Upay), bank account reference information where applicable, deposit amounts, withdrawal requests, and full transaction history. We do not store full payment card numbers on our servers — card transactions are handled by PCI DSS-compliant payment processors.

Technical and Usage Data includes your IP address, device identifiers, browser type and version, operating system, session start and end times, pages and games accessed, bet amounts, wager frequency, and platform interaction patterns. This data supports fraud prevention, responsible gaming monitoring, and platform performance improvements.

7baji collects personal data through the following channels:

• Direct interactions: Data you provide voluntarily when you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, respond to a survey, or participate in a promotion.
• Automated technologies: Technical and usage data collected automatically as you navigate the platform, including through cookies, web beacons, server logs, and analytics tools. See Section 9 for full details on our cookie practices.
• Third-party sources: Identity verification data from KYC service providers; fraud risk scores from anti-fraud platforms; transaction confirmation data from payment processors such as bKash, Nagad, Rocket, and Upay. 7baji only receives data from third parties that have a lawful basis to share it.
• Publicly available sources: In limited circumstances related to fraud investigation or AML compliance, 7baji may consult publicly available sources such as official sanction lists or court records.

7baji uses your personal data for the following purposes:

• To create, manage, and maintain your registered account, including processing your login credentials and account settings.
• To verify your identity and age in compliance with our Know Your Customer (KYC) requirements before processing your first withdrawal and at any subsequent verification checkpoint.
• To process deposits and withdrawals via your chosen payment method, including reconciling transactions with payment processor records.
• To monitor betting and gaming activity for signs of problem gambling and to administer responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion.
• To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct as described in our Terms & Conditions.
• To send you transactional notifications — including deposit confirmations, withdrawal updates, security alerts, and important account communications — via email or SMS.
• To send you promotional communications about 7baji bonuses, tournaments, and seasonal offers, but only where you have provided explicit consent and only until that consent is withdrawn.
• To improve the 7baji platform through analysis of aggregated usage patterns, game performance data, and technical diagnostic information.
• To respond to your customer support queries, complaints, and data rights requests.
• To comply with applicable laws, regulatory requirements, court orders, and instructions from law enforcement bodies.

7baji processes personal data only where a lawful basis exists. The legal bases we rely upon are:

• Contract performance: Processing is necessary to perform our contract with you — i.e., to operate your account, process bets, and handle deposits and withdrawals. Without this processing, we cannot provide the service.
• Legal obligation: Processing is necessary for compliance with applicable legal obligations, including anti-money laundering (AML) regulations, age verification requirements, and financial record-keeping obligations.
• Legitimate interests: Processing is necessary for our legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided these interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and the use of non-essential cookies, we process your data only where you have provided freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time by contacting our support team.

7baji does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only with parties who are contractually bound to protect it:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and Islami Bank receive only the transaction data required to execute your deposit or withdrawal.
• KYC and identity verification providers: Third-party identity verification services receive your identity documents and biometric data (if applicable) solely for the purpose of confirming your eligibility to use the platform.
• Game content providers: Providers such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe may receive technical session data required to deliver their game content within the 7baji platform. They do not receive your identity or financial data.
• Fraud and AML screening services: Anti-fraud and anti-money laundering platforms receive anonymised or pseudonymised behavioural data to generate risk scores. These providers act as data processors under our instruction.
• Legal and regulatory authorities: 7baji will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by law, a valid legal order, or where we reasonably believe disclosure is necessary to prevent serious harm.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the 7baji business, your personal data may be transferred to the acquiring entity as part of that transaction, subject to the same privacy protections described in this policy.

7baji's primary servers are located in secure data centres outside Bangladesh. Where your personal data is transferred to a country that does not offer the same level of data protection as your home jurisdiction, 7baji takes steps to ensure that adequate safeguards are in place. These safeguards include contractual clauses that require the recipient to protect the data to a standard equivalent to the protections described in this policy.

By using the 7baji platform and providing your personal data, you acknowledge and consent to the transfer, storage, and processing of your data in locations outside Bangladesh, where necessary for the operation of the platform and the purposes described in this policy.

7baji retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, and for as long as required to comply with applicable legal and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account relationship and for a minimum of five (5) years following account closure, to comply with AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of each transaction, in accordance with financial record-keeping obligations.
• Customer support correspondence: Retained for three (3) years from the date of the final communication, unless the correspondence relates to an ongoing legal dispute.
• Technical and usage data (logs): Retained for thirteen (13) months from the date of collection, after which they are automatically deleted or anonymised.
• Marketing consent records: Retained for three (3) years from the date of the last marketing communication sent to the account, or until consent is withdrawn, whichever is earlier.

When a retention period expires and no legal hold is in place, 7baji will securely delete the data or irreversibly anonymise it so that it can no longer be attributed to an identifiable individual.

7baji uses cookies and similar tracking technologies to operate the platform, maintain your session, detect fraud, and — where you have consented — to personalise your experience and measure the performance of our marketing campaigns.

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. These cookies cannot be disabled without breaking the platform.
• Functional cookies: Remember your preferences such as language settings and display preferences to improve your experience across sessions.
• Analytics cookies: Collect anonymised data about how users interact with the platform — which pages are visited most, how long sessions last, and where users encounter errors. This data helps us improve the platform. Used only with your consent.
• Marketing cookies: Track whether you arrived on 7baji via a promotional link and help us measure the effectiveness of our campaigns. Used only with your consent.

You may manage your cookie preferences at any time by adjusting the settings in your browser. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the platform.

You have the following rights in respect of the personal data 7baji holds about you. To exercise any of these rights, contact our data team at [email protected] with the subject line "Data Rights Request".

The 7baji platform is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or store personal data belonging to any person under the age of 21. If you are under 21, you must not access or use the 7baji platform under any circumstances.

If 7baji becomes aware that personal data has been collected from an individual under the age of 21, that data will be deleted immediately, the associated account will be closed, and any deposited funds will be returned to the originating payment method. If you are a parent or guardian and believe your child has accessed the 7baji platform, please contact us immediately at [email protected].

7baji employs a multi-layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal data against unauthorised access, disclosure, alteration, or destruction.

• 256-bit SSL/TLS encryption on all data in transit between your device and our servers.
• AES-256 encryption for sensitive data at rest, including identity documents and financial records.
• Role-based access controls ensuring that only authorised personnel with a documented need can access personal data.
• Regular independent penetration testing and vulnerability assessments of the 7baji platform infrastructure.
• Two-factor authentication (2FA) available to all account holders to protect against unauthorised login.
• Automated anomaly detection systems that flag unusual login locations, transaction patterns, or device changes for immediate review.
• Staff data protection training and confidentiality agreements covering all personnel with access to personal data.

While 7baji takes all reasonable steps to protect your data, no internet-based service can guarantee absolute security. You are responsible for maintaining the security of your own account credentials and for notifying 7baji promptly if you suspect any unauthorised access to your account.

7baji reviews this Privacy Policy regularly and may update it to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered account holders by email using the address on file and will update the "Effective Date" at the top of this document.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data. Continued use of the 7baji platform after the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. If you disagree with any changes, you are entitled to close your account and request deletion of your personal data, subject to our legal retention obligations.

For any questions, concerns, or requests relating to this Privacy Policy or the personal data 7baji holds about you, please contact our dedicated data protection team:

Email: [email protected] — Subject line: "Privacy Request"

Our support team is available 24 hours a day, seven days a week, including during Bangladeshi public holidays. Response to privacy-specific queries is prioritised and handled by our dedicated data protection staff. We aim to acknowledge all privacy-related emails within 5 business days (Bangladesh Standard Time, UTC+6).