7c7c Privacy Policy

1. Data Controller and Scope

This Privacy Policy ("Policy") applies to all personal data collected and processed by 7c7c ("we", "us", "our") in connection with the operation of the online casino and sports betting platform available at https://7c7c.club (the "Platform"). By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Policy.

7c7c acts as the data controller for all personal data collected through the Platform. This means 7c7c determines the purposes for which your data is collected and the manner in which it is processed. If you have questions about data controllership or wish to exercise your data rights, you may contact us at [email protected].

This Policy covers all personal data collected from players and visitors based in Bangladesh, as well as any individual who accesses the Platform regardless of geographic location. It applies to data collected through the website, any associated mobile application, email and live chat communications, and through payment processing interactions.

2. Personal Data We Collect

7c7c collects personal data in several ways: directly from you when you register or use the Platform, automatically through your use of the Platform (such as via cookies and server logs), and from third parties such as payment processors and identity verification services. The categories of personal data we collect are set out below.

2.1 Registration and Identity Data

When you create an account with 7c7c, we collect the following registration information:

• Full legal name (as it appears on your national identity document)
• Date of birth (used for age verification — 18+ requirement)
• Residential address in Bangladesh (district, division, full postal address)
• Email address
• Mobile phone number (used for account security and payment verification)
• Username and hashed password (passwords are never stored in plain text)

2.2 Identity Verification (KYC) Documents

To comply with responsible gaming and anti-money laundering obligations, 7c7c may request identity verification documents including:

• National Identity Card (NID) or passport copy
• Proof of address (utility bill, bank statement, or mobile financial service statement dated within three months)
• Proof of payment method ownership (screenshot or confirmation of bKash, Nagad, Rocket, or bank account in your name)

2.3 Financial Transaction Data

When you make deposits or withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, or Mastercard, we collect transaction records including amounts in BDT (৳), transaction timestamps, payment method identifiers, and transaction reference numbers. We do not store complete card numbers or mobile banking PINs — full payment credentials are handled directly by the respective payment service providers.

2.4 Gameplay and Betting Data

7c7c records all gameplay and wagering activity associated with your account, including bet amounts, game types, session durations, game provider identifiers, win and loss records, and bonus claim history. This data is used for account administration, dispute resolution, responsible gaming monitoring, and regulatory compliance purposes.

2.5 Technical and Device Data

We automatically collect certain technical information when you access the Platform, including your IP address, device type and operating system, browser type and version, screen resolution, referring URL, and session timestamps. This data is used for security monitoring, fraud detection, and platform performance optimisation.

Data Category	Examples	Primary Purpose
Identity Data	Name, DOB, NID, address	Account creation, age verification, KYC
Contact Data	Email, mobile number	Account communications, security alerts
Financial Data	Transaction amounts, payment method IDs	Deposits, withdrawals, AML compliance
Gameplay Data	Bets, game history, session length	Account admin, dispute resolution, responsible gaming
Technical Data	IP address, device, browser	Security, fraud detection, performance
Communication Data	Support emails, chat transcripts	Customer service, quality assurance

3. How We Use Your Data

7c7c uses the personal data collected from you for the following specific purposes. We process your data only to the extent necessary for each stated purpose and do not use it in ways incompatible with the reason it was originally collected.

• Account Management: Creating, maintaining, and administering your 7c7c player account, including processing login requests, updating account settings, and managing responsible gaming tool activations such as deposit limits and self-exclusion.
• Payment Processing: Facilitating deposits and withdrawals in BDT via supported Bangladesh payment methods including bKash, Nagad, Rocket, and bank transfers. Verifying that payment methods are registered in your name.
• Age and Identity Verification: Confirming that you meet the 18+ age requirement before activating your account for real-money gameplay, and completing KYC checks required under our responsible gaming and anti-money laundering obligations.
• Customer Support: Responding to your enquiries, resolving account disputes, processing formal complaints, and following up on responsible gaming requests submitted to [email protected].
• Security and Fraud Prevention: Monitoring account activity for signs of unauthorised access, fraudulent transactions, multi-accounting, or other prohibited conduct as defined in our Terms and Conditions. Investigating suspected breaches of Platform rules.
• Responsible Gaming Compliance: Monitoring gameplay patterns to identify potential problem gambling behaviour, enforcing cooling-off periods and self-exclusion orders, and providing mandated disclosures to players who trigger responsible gaming thresholds.
• Platform Improvement: Analysing aggregated, anonymised usage data to identify areas for improving the Platform's performance, user interface, game selection, and payment process. This analysis does not involve profiling of individual players.
• Legal and Regulatory Compliance: Retaining records necessary to respond to legal orders, regulatory requests, or law enforcement enquiries, and to defend against legal claims brought against 7c7c.
• Service Communications: Sending you transactional emails and SMS notifications related to your account activity, deposit and withdrawal confirmations, security alerts, and updates to platform policies. We do not send unsolicited marketing communications without your opt-in consent.

4. Legal Basis for Processing

7c7c processes personal data on the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual Necessity: Processing required to fulfil our obligations under the account registration agreement with you — including account creation, payment processing, and customer support — is carried out on the basis of contractual necessity.
• Legitimate Interests: Processing for security monitoring, fraud detection, responsible gaming oversight, and platform analytics is carried out on the basis of 7c7c's legitimate interest in operating a safe, reliable, and compliant platform. We balance these interests against your privacy rights and apply appropriate safeguards.
• Legal Obligation: Processing necessary to comply with applicable anti-money laundering requirements, age verification obligations, record-keeping duties, and law enforcement cooperation is carried out on the basis of legal obligation.
• Consent: Where 7c7c seeks to send you marketing communications about promotions, new games, or special offers, we will request your explicit opt-in consent at the time of registration or account settings update. You may withdraw this consent at any time by contacting [email protected].

5. Data Sharing and Third Parties

7c7c does not sell your personal data to third parties. We may share your personal data with carefully selected categories of third parties only where necessary to deliver the Platform's services, comply with legal obligations, or protect the security of the Platform.

5.1 Payment Service Providers

To process your deposits and withdrawals, 7c7c shares the minimum necessary payment and identity information with payment service providers including bKash, Nagad, Rocket, Upay, and the relevant Bangladesh commercial banks. These providers act as independent data controllers for the payment transaction data they receive and are subject to their own privacy policies and Bangladesh Bank regulations.

5.2 Game Content Providers

Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier in order to load and run their games within the Platform. These providers do not receive your full registration details, NID, or financial transaction history. Game providers are contractually required to process player session data only for the purpose of game delivery and result certification.

5.3 Identity Verification Services

Where 7c7c uses a third-party KYC or identity verification service to assist with document verification, that provider will receive a copy of the identity document you submit and your registration name and date of birth. KYC providers are data processors acting under 7c7c's instructions and are bound by data processing agreements that restrict their use of your data to the verification purpose only.

5.4 Legal and Regulatory Disclosure

7c7c may disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, a valid court order, or a legitimate legal process. 7c7c will notify you of such disclosure requests to the extent permitted by law before complying.

6. Cookies and Tracking Technologies

7c7c uses cookies and similar browser-based storage technologies to operate and improve the Platform. A cookie is a small text file placed on your device by the Platform when you visit. The categories of cookies we use are described below.

6.1 Strictly Necessary Cookies

These cookies are required for the Platform to function and cannot be disabled. They include session authentication cookies (which keep you logged in during your session), security tokens (which protect against cross-site request forgery), and load-balancing cookies (which route your requests to the correct server). No personal data beyond your session identifier is stored in these cookies.

6.2 Functional Cookies

Functional cookies remember your account preferences, such as your preferred language, game display settings, and responsible gaming tool configurations. These cookies improve your experience by reducing the need to re-enter preferences on each visit. They do not track your behaviour across external websites.

6.3 Analytical Cookies

7c7c uses analytical cookies to collect aggregated, anonymised data about how players navigate and use the Platform. This data helps us identify popular game categories, detect navigation bottlenecks, and measure the effectiveness of platform updates. Individual player data derived from analytical cookies is not shared with third parties and is not used for profiling.

6.4 Managing Cookies

You may configure your browser to block or delete cookies at any time. Note that disabling strictly necessary cookies will prevent you from logging in and using the Platform's core functions. Instructions for managing cookies in major browsers (Chrome, Firefox, Safari, Edge, Samsung Internet) are available in those browsers' help documentation. 7c7c does not currently respond to browser "Do Not Track" signals as there is no universally accepted standard for this mechanism.

7. Data Retention Periods

7c7c retains personal data only for as long as necessary to fulfil the purposes for which it was collected, and in accordance with applicable legal and regulatory retention obligations. The following general retention periods apply:

Data Type	Retention Period	Basis
Account registration data	Duration of account + 5 years after closure	Legal obligation / AML compliance
KYC / identity documents	5 years from submission or account closure	Legal obligation / AML compliance
Financial transaction records	7 years from transaction date	Legal obligation / financial records law
Gameplay and betting history	Duration of account + 3 years after closure	Dispute resolution / responsible gaming
Customer support communications	3 years from last interaction	Legitimate interests / dispute resolution
Technical / server log data	12 months from collection	Security monitoring / fraud detection
Marketing consent records	Until consent is withdrawn + 3 years	Legal obligation / consent management

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. If you close your account but legal retention obligations require us to retain certain data, the retained data is placed in a restricted access archive and is not used for any operational purpose.

8. Data Security Measures

7c7c implements a layered approach to data security designed to protect your personal information against unauthorised access, disclosure, alteration, or destruction. Our security framework includes the following measures:

• Encryption in Transit: All data exchanged between your browser or device and the 7c7c Platform is encrypted using TLS 1.2 or higher. This applies to login requests, payment submissions, and all API communications.
• Encryption at Rest: Sensitive data fields — including identity document copies, KYC data, and hashed credentials — are stored using AES-256 encryption on secured database servers.
• Access Controls: Access to personal data is restricted to 7c7c staff members who require it to perform their job functions. Role-based access control (RBAC) ensures that customer support agents, compliance staff, and finance teams can access only the data categories relevant to their roles. All staff with data access are subject to confidentiality obligations.
• Password Security: User passwords are never stored in plain text. 7c7c uses a strong one-way hashing algorithm with per-user salt to store password credentials. 7c7c staff cannot retrieve your password and will never ask you to share it.
• Two-Factor Authentication: 7c7c strongly recommends enabling two-factor authentication (2FA) on your account. 2FA requires you to enter a one-time code sent to your registered mobile number in addition to your password when logging in from an unrecognised device.
• Security Monitoring: 7c7c operates continuous security monitoring of Platform infrastructure to detect anomalous access patterns, intrusion attempts, and data exfiltration indicators. Security incidents are assessed and responded to according to a documented incident response procedure.
• Data Breach Response: In the event of a personal data breach that poses a risk to your rights and interests, 7c7c will notify affected players without undue delay, describing the nature of the breach, the categories of data affected, the likely consequences, and the measures taken to address the breach.

9. Your Data Rights

As a 7c7c player, you have the following rights with respect to your personal data. To exercise any of these rights, please submit a written request to [email protected] with your full name, registered email address, and a description of the right you wish to exercise. 7c7c will respond to all verifiable data rights requests within 30 days.

• Right of Access: You have the right to request a copy of all personal data 7c7c holds about you, along with information about the purposes for which it is processed, the categories of data held, and the third parties with whom it has been shared.
• Right to Rectification: If any personal data held by 7c7c is inaccurate or incomplete, you have the right to request that it be corrected or updated. For registered account details such as name, address, or date of birth, please submit supporting documentation with your rectification request.
• Right to Erasure ("Right to Be Forgotten"): You may request that 7c7c delete your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent (for consent-based processing), or where processing is unlawful. This right is subject to legal retention obligations — for example, financial transaction records required for AML compliance cannot be deleted before the mandatory retention period has elapsed.
• Right to Restriction of Processing: You may request that 7c7c restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing based on legitimate interests, pending verification of whether 7c7c's interests override yours.
• Right to Data Portability: Where processing is based on your consent or on a contract with you, and processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV), and to request that it be transmitted to another data controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling based on those interests. If you object, 7c7c will cease the processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (for example, receipt of marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw marketing consent, email [email protected].

10. Children's Privacy

The 7c7c Platform is strictly intended for adults aged 18 and above. 7c7c does not knowingly collect, process, or retain personal data relating to individuals under the age of 18. All new accounts are subject to age verification checks, and accounts where the holder is found to be under 18 are immediately suspended pending investigation.

If you are a parent or guardian and you believe that a person under 18 in your care has registered an account with 7c7c or has provided personal data to the Platform without your knowledge, please contact us immediately at [email protected]. We will take prompt action to verify the claim, close the account, and delete any personal data associated with that account in accordance with our minor protection procedures.

7c7c does not direct marketing communications to individuals under the age of 18. If our monitoring systems identify that a registered account is likely held by a minor based on gameplay patterns, declared details, or verification document review, the account is immediately flagged and reviewed by our compliance team. This Platform is for adults aged 18 and above only.

11. Policy Updates and Contact Information

7c7c reserves the right to update this Privacy Policy at any time to reflect changes in Platform operations, data processing practices, or applicable legal requirements. When material changes are made to this Policy, 7c7c will post the updated version on this page with a revised "Last Updated" date and, where the changes are significant, will notify registered players via their registered email address or an in-platform notification.

Your continued use of the 7c7c Platform following publication of an updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with the changes, you should close your account and cease using the Platform. Account closure requests can be submitted to [email protected].

The version of this Privacy Policy currently published at https://7c7c.club/privacy-policy supersedes all previous versions. If you have any questions about this Policy, your data rights, or 7c7c's data processing practices, please contact us using the details below:

• Email: [email protected]
• Response Time: Typically within 2 hours, available 24/7
• Support Language: English
• Time Zone: Bangladesh Standard Time (BST, UTC+6)