bd7 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how bd7 ("bd7", "we", "us", "our") collects, uses, stores, discloses, and otherwise processes personal data relating to individuals ("you", "your", "Player", "User") who access or use the bd7 website, mobile platform, casino and sportsbook services, payment systems, and all associated features (collectively, the "Platform").

bd7 is committed to protecting the privacy of every player who uses our Platform, including those accessing bd7 from Bangladesh and other permitted jurisdictions. This Policy is intended to be read alongside our Terms & Conditions, which govern the overall use of the bd7 Platform.

By registering an account, making a deposit, or otherwise using the bd7 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the bd7 Platform.

We reserve the right to update this Policy at any time. The "Last Updated" date at the top of this document reflects the most recent revision. Continued use of the Platform following any update constitutes your acceptance of the revised Policy.

2 Data We Collect

bd7 collects the following categories of personal data in connection with your use of the Platform:

bd7 does not intentionally collect any special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless required by law or explicitly provided by you in a support context.

3 How We Collect Your Data

bd7 collects personal data through the following means:

• Direct interactions: Data you provide when creating your bd7 account, completing identity verification, making deposits or withdrawals, contacting our support team, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the Platform, including via cookies, web beacons, pixel tags, and server log files. Please refer to Section 7 for our full Cookies policy.
• Third-party sources: Identity and financial verification data received from our KYC partners, payment processors (bKash, Nagad, Rocket, Upay), and fraud-prevention service providers.
• Publicly available sources: Information from public databases or government records used to verify your identity or comply with AML obligations.

4 How We Use Your Data

bd7 uses the personal data we collect for the following purposes:

1. Account management: To register, maintain, and administer your bd7 account, and to verify your identity and age in accordance with our legal obligations.
2. Service delivery: To provide access to casino games, live dealer tables, sportsbook markets, and all other features of the bd7 Platform.
3. Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain accurate transaction records.
4. Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, money laundering, unauthorised account access, and other prohibited activities as described in our Terms & Conditions.
5. Regulatory compliance: To fulfil our obligations under applicable anti-money-laundering (AML) regulations, know-your-customer (KYC) requirements, and any other legal or regulatory duties imposed by our licensing framework.
6. Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance in connection with your bd7 account.
7. Responsible gaming: To monitor gameplay patterns and identify potential indicators of problem gambling, and to administer self-exclusion, deposit limit, and other responsible gaming tools at your request.
8. Platform improvement: To analyse usage patterns, test new features, and improve the performance, design, and content of the bd7 Platform.
9. Marketing communications: To send you promotional offers, bonus notifications, and updates about bd7 services — but only where you have given explicit consent to receive such communications. You may opt out at any time.

5 Legal Basis for Processing

bd7 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil our contractual obligations to you under the bd7 Terms & Conditions — including account registration, service delivery, and payment processing.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML, KYC, and data retention requirements imposed by our licensing authority.
• Legitimate interests: Processing carried out for purposes that are in the legitimate interests of bd7 — such as fraud prevention, platform security, and service improvement — provided those interests are not overridden by your fundamental privacy rights.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — primarily for marketing communications. You have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Disclosure

bd7 does not sell your personal data to any third party. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other payment partners, to the extent necessary to process your transactions.
• Identity verification and KYC partners: Third-party providers who assist bd7 in verifying the identity and age of players as required by our compliance framework.
• Fraud prevention and security providers: Specialised vendors who help bd7 detect and prevent fraudulent activity, unauthorised access, and money laundering.
• Game technology providers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who may receive limited technical data for the purposes of game delivery and fairness auditing.
• Regulatory and law-enforcement authorities: Where we are required by law, court order, or regulatory mandate to disclose information — including to financial intelligence units in connection with AML compliance.
• Professional advisers: Legal advisers, auditors, and insurers operating under strict professional confidentiality obligations.
• Business successors: In the event of a merger, acquisition, or sale of bd7 business assets, personal data may be transferred to the successor entity, subject to the same privacy protections set out in this Policy.

All third parties with whom bd7 shares personal data are required to handle that data in accordance with applicable data protection standards and our contractual data processing requirements. bd7 does not authorise third parties to use your data for their own independent marketing purposes.

7 Cookies & Tracking Technologies

bd7 uses cookies and similar tracking technologies to improve your experience on the Platform, maintain session continuity, and gather analytical data about Platform usage. The following types of cookies may be set when you use bd7:

• Strictly necessary cookies: Essential for the Platform to function correctly. These cookies enable core features such as session authentication, security, and load balancing. They cannot be disabled without impairing your use of bd7.
• Functional cookies: Used to remember your preferences — such as language settings and display options — to personalise your bd7 experience across sessions.
• Analytical cookies: Used to collect aggregate, anonymised data about how players interact with the bd7 Platform, including pages visited, features used, and time spent. This data helps us improve our services.
• Marketing cookies: Used to deliver promotional content relevant to your interests, based on your browsing activity on bd7. These are only activated with your explicit consent.

You can manage your cookie preferences through your web browser settings. Note that disabling strictly necessary cookies may prevent certain features of the bd7 Platform from functioning correctly. For detailed cookie management instructions, consult the help documentation for your browser.

8 Data Retention

bd7 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in order to meet AML and regulatory record-keeping obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by anti-money-laundering regulations.
• Identity verification documents: Retained for a minimum of five (5) years from the date of verification, or longer if required by applicable law.
• Customer support correspondence: Retained for up to three (3) years from the date of each interaction, unless related to an ongoing dispute or regulatory investigation.
• Marketing consent records: Retained for the duration of your opt-in status plus three (3) years following withdrawal of consent, as evidence of compliance with marketing regulations.

Upon expiry of the applicable retention period, your data will be securely deleted or anonymised in accordance with our internal data governance procedures.

9 Data Security

bd7 employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Password hashing using industry-standard cryptographic algorithms — no bd7 system or employee stores or has access to your password in plain text.
• Access controls: Personal data is accessible only to authorised bd7 personnel and third-party processors who have a legitimate need for it in connection with their assigned functions.
• Regular security audits and penetration testing to identify and remediate vulnerabilities in our systems and infrastructure.
• Incident response procedures: In the event of a data breach that poses a risk to your rights and freedoms, bd7 will notify affected players and relevant authorities in accordance with applicable notification obligations.

While bd7 takes all reasonable precautions to safeguard your data, no internet transmission or electronic storage system is completely secure. You are also responsible for maintaining the security of your own bd7 account credentials. Do not share your password with anyone, and contact our support team immediately if you suspect unauthorised access to your account.

10 Your Privacy Rights

As a bd7 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at the details provided in Section 14:

• Right of access: You may request a copy of the personal data bd7 holds about you, along with information about how it is used.
• Right to rectification: You may request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restrict processing: You may request that we limit our use of your personal data in certain circumstances — for example, while the accuracy of data is disputed.
• Right to data portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing of your personal data for direct marketing purposes at any time, with immediate effect.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

bd7 will respond to all valid privacy rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, with notification provided to you. We may need to verify your identity before processing your request to ensure data security.

11 Children's Privacy

bd7 is strictly an adult platform. Our services are not directed at, and are not intended for use by, any person under the age of 18. bd7 does not knowingly collect, process, or store personal data from individuals under 18 years of age.

If we discover or are informed that a person under 18 has provided us with personal data or created an account on bd7, we will immediately close that account, void any associated transactions, and securely delete the data in question. Parents and guardians who believe a minor may have registered on bd7 are urged to contact our support team without delay.

12 Third-Party Links

The bd7 Platform may contain references to third-party services — such as payment providers including bKash, Nagad, and Rocket — that operate under their own independent privacy policies. bd7 is not responsible for the privacy practices of any third-party service, and this Policy does not apply to any external platforms or services. We encourage you to review the privacy policies of any third-party service you access in connection with your use of bd7.

13 Amendments to This Policy

bd7 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will endeavour to notify registered players via the email address on file prior to the changes taking effect. The updated Policy will always be available on the bd7 Platform with a revised "Last Updated" date.

Your continued use of the bd7 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you must cease using the Platform and may request closure of your account in accordance with our Terms & Conditions.

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way bd7 handles your personal data, please contact our dedicated privacy team:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the bd7 Platform — responses in Bangladesh Standard Time (BST, UTC+6)
• Response Time: We aim to acknowledge all privacy-related enquiries within 48 hours and resolve them within 30 calendar days.

For urgent matters — including suspected data breaches, requests to delete your account, or self-exclusion requests related to responsible gaming — please mark your message as urgent and our team will prioritise your case accordingly.