7cbaji Privacy Policy

This Privacy Policy ("Policy") describes how 7cbaji ("we", "us", "our", or the "Platform"), operating the online gaming and sports betting website at 7cbaji.pro, collects, uses, stores, shares, and protects the personal information of individuals ("you", "your", or "Player") who register accounts, visit the website, or otherwise interact with any part of the 7cbaji service.

By registering an account on 7cbaji or by continuing to use the platform after this Policy has been updated, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the 7cbaji platform.

This Policy should be read alongside the 7cbaji Terms & Conditions, which are incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions on a privacy-specific matter, this Policy prevails.

7cbaji may update this Policy periodically to reflect changes in how we operate, changes to the law, or improvements to our data practices. Material changes will be communicated to registered players via SMS notification to their registered mobile number. The "Last Updated" date at the top of this page always reflects the most current version.

2.1 Data You Provide Directly

When you register, transact, or communicate with 7cbaji, we collect the following categories of personal data that you provide to us voluntarily:

2.2 Data Collected Automatically

When you access the 7cbaji platform, our systems automatically collect certain technical data to ensure the service functions correctly, to detect fraud, and to improve the user experience:

• Device information: Device type, operating system version, browser type and version, screen resolution, device language setting
• Network information: IP address, approximate geographic location derived from IP (city/region level only), mobile network operator
• Usage data: Pages visited, features used, games played, session start and end times, click and navigation patterns, error logs
• Cookie and local storage data: Session tokens, preference settings, analytics identifiers — see Section 8 for full cookie details

2.3 Data Received from Third Parties

In certain circumstances, 7cbaji may receive personal data about you from third-party sources, including:

• Mobile financial service providers (bKash, Nagad, Rocket, Upay): Transaction confirmation data — amount, timestamp, and sender account reference — to verify deposits and process withdrawals
• Identity verification partners: Data returned from KYC/AML screening services used to confirm the authenticity of documents you submit
• Fraud prevention services: Risk scores or flagging data associated with IP addresses or device fingerprints linked to known fraudulent activity

7cbaji ensures that all third-party data sources have appropriate legal bases for sharing your information with us, and we process such data in accordance with this Policy.

7cbaji processes your personal data only for specific, legitimate purposes. The table below sets out the primary purposes for which we use your data and the legal basis under which each processing activity is conducted.

7cbaji does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Where automated checks flag an account for fraud or KYC failure, a qualified team member reviews the flag before any action is taken.

7cbaji shares your personal data only in the limited circumstances described below, and only to the minimum extent necessary for each purpose:

4.1 Payment Service Providers

To process deposits and withdrawals, 7cbaji shares necessary transaction reference data with your chosen mobile financial service provider (bKash, Nagad, Rocket, or Upay). This data exchange is strictly limited to what is required to initiate and confirm the transaction. Your mobile banking PIN and authentication credentials are processed entirely by your financial service provider and are never transmitted to or stored by 7cbaji.

4.2 Game Content Providers

Third-party game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — receive a session token and an anonymised player identifier when you launch a game. This allows the game client to authenticate your session without receiving your full personal profile. Game providers are contractually prohibited from using this data for any purpose beyond game session management.

4.3 Identity Verification and KYC Partners

To fulfil age verification (21+) and identity verification obligations, 7cbaji may share the documents you submit — such as your NID scan and selfie — with a contracted KYC/AML verification service. These partners process your documents solely for identity verification and are bound by strict data processing agreements.

4.4 Legal and Regulatory Authorities

7cbaji will disclose personal data to law enforcement agencies, courts, or regulatory bodies when required by law, when responding to a valid legal process (such as a court order or statutory notice), or when disclosure is necessary to prevent imminent harm or financial crime. We will notify you of such disclosure where legally permitted to do so.

4.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving 7cbaji, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change in how your data is processed as a result.

4.6 Technical Infrastructure Providers

7cbaji uses contracted cloud hosting, content delivery, and platform infrastructure providers to operate the service. These providers may process your data on our behalf as data processors and are bound by data processing agreements that prohibit them from using your data for their own purposes.

7cbaji retains your personal data for as long as your account is active and for a defined period thereafter, based on the nature of the data and the purpose for which it was collected. Our standard retention periods are:

• Account and identity data: Retained for the lifetime of your account and for a minimum of 5 years following account closure, to satisfy anti-money laundering (AML) record-keeping obligations
• Transaction records: Retained for a minimum of 5 years from the date of each transaction
• KYC documents: Retained for a minimum of 5 years following completion of the verification process
• Support communications: Retained for 3 years from the date of the last interaction, unless related to an active dispute
• Marketing consent records: Retained for 3 years from the date consent was given or last refreshed
• Technical/usage logs: Retained for 12 months in operational systems; anonymised aggregate data may be retained indefinitely for analytics

When data is no longer required for the purpose for which it was collected and no legal retention obligation applies, 7cbaji will securely delete or anonymise it. Anonymised data that cannot be traced back to any individual is no longer considered personal data and may be retained and used without restriction.

If you request account closure, your active account data will be suppressed from operational use immediately. However, underlying records required by law (AML, transaction history) will be retained for the applicable statutory period before permanent deletion.

7cbaji employs a layered security approach to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our key technical and organisational security measures include:

• Transport encryption: TLS 1.2 / TLS 1.3 on all data in transit between your device and our servers
• Data at rest encryption: AES-256 encryption for all sensitive personal and financial data stored on our infrastructure
• Password security: All account passwords are stored as bcrypt-hashed salted values. Plain-text passwords are never stored or transmitted
• Two-factor authentication (2FA): OTP-based 2FA is available and strongly recommended for all player accounts
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis using role-based access control (RBAC). All staff access is logged and audited
• Network security: Web application firewall (WAF), DDoS mitigation, and intrusion detection systems are in place
• Penetration testing: Regular external security assessments are conducted to identify and remediate vulnerabilities
• Incident response: A documented data breach response procedure is in place; affected players will be notified promptly in the event of a breach that creates a risk to their rights

While 7cbaji takes all reasonable precautions, no online platform can guarantee absolute security. You are responsible for keeping your own account credentials secure. If you suspect unauthorised access to your account, contact support at [email protected] immediately.

As a 7cbaji player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us in writing at [email protected]. We will respond within 30 calendar days of receiving a verifiable request.

• Right of access: You may request a copy of the personal data 7cbaji holds about you, along with information about how it is being processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For account details, many fields can be updated directly from within your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations (such as AML record-keeping requirements, which override erasure requests for the relevant data during the applicable retention period).
• Right to restrict processing: You may request that we limit processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold, or while a complaint is being investigated.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where we rely on your consent as the legal basis for processing (for example, for direct marketing SMS), you may withdraw that consent at any time by contacting support or updating your notification preferences in account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
• Right to object: You may object to processing based on legitimate interests, including profiling for fraud detection or responsible gaming monitoring, where you believe your particular circumstances outweigh our legitimate interest in that processing.

7cbaji will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee or decline to respond, explaining our reasons in writing.

7cbaji uses cookies and similar browser storage technologies (local storage, session storage) to operate the platform, maintain your session, remember your preferences, detect fraud, and gather anonymised analytics data about how the platform is used.

8.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Preference cookies: Store your language, notification, and display settings so you do not need to re-enter them on each visit.
• Analytics cookies: Collect anonymised data about pages visited, session duration, and feature usage to help us improve the platform. This data is aggregated and cannot be used to identify individual players.
• Security cookies: Used for fraud detection and bot prevention, including device fingerprinting and behavioural analysis to distinguish legitimate player sessions from automated activity.

8.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most mobile browsers allow you to block or delete cookies from within the browser's privacy settings menu. Please note that disabling strictly necessary cookies will prevent you from logging in to your 7cbaji account. Disabling preference cookies will mean your settings are not saved between sessions.

7cbaji does not use third-party advertising cookies or cross-site tracking cookies to serve targeted advertising to players on external websites.

The 7cbaji platform is an adult gaming service. Registration is permitted only for individuals who are 21 years of age or older. During the account registration process, all players are required to confirm their age and may be required to provide documentary proof of age as part of the KYC process.

If 7cbaji becomes aware that a player account has been created by or on behalf of an individual under 21, that account will be immediately suspended and any associated funds will be handled in accordance with our Terms & Conditions. Any personal data collected in connection with such an account will be deleted promptly, to the extent permitted by law.

We encourage responsible adults to use parental control software to prevent minors from accessing online gaming platforms. If you share a device with others, ensure your 7cbaji account is protected by a strong password and that you log out after each session.

If you have any questions, concerns, or complaints about this Privacy Policy, or if you wish to exercise any of your data rights, please contact the 7cbaji privacy team in writing:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: "Privacy Request – [Your Registered Mobile Number]"
• Response time: Within 30 calendar days of receipt of a verifiable request

For urgent account security concerns (suspected unauthorised access, suspected identity theft), please also use the above email address and mark your message as urgent. Account security issues will be prioritised and acknowledged within 24 hours on business days.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.