Privacy Policy — Your Data, Protected by 7bat

1 Introduction & Scope

This Privacy Policy describes how 7bat collects, uses, stores, and protects personal data belonging to individuals who visit or use the 7bat online betting and casino platform, accessible at https://7bat.io. It applies to all registered account holders, prospective players who have begun but not completed registration, and visitors who browse the platform without creating an account.

By accessing or using the 7bat platform, you acknowledge that you have read this Privacy Policy and that you understand how your personal data will be handled. If you do not agree with the practices described in this policy, you should cease using the platform immediately.

This Privacy Policy should be read alongside the 7bat Terms & Conditions, which are incorporated by reference. Defined terms used in this policy have the same meaning as in the Terms & Conditions unless otherwise stated.

2 Data Controller Information

7bat is the data controller responsible for the personal data processed under this Privacy Policy. As data controller, 7bat determines the purposes for which your personal data is used and the means by which it is processed.

All data-related enquiries, subject access requests, correction requests, deletion requests, and privacy complaints should be directed to:

• Platform: https://7bat.io
• Email: [email protected]
• Support hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (BST, UTC+6)

When contacting us about a data-related matter, please include your registered account username and a clear description of your request so our team can locate your records promptly and respond within the applicable timeframe.

3 What Personal Data We Collect

7bat collects the following categories of personal data, depending on how you interact with the platform:

We do not collect sensitive special-category personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data for identification purposes beyond what is strictly required for age and identity verification.

4 How We Collect Your Data

7bat collects personal data through the following channels:

• Direct collection: Data you provide directly by completing the registration form, submitting a KYC verification request, making a deposit or withdrawal, completing a bonus opt-in form, or contacting our support team.
• Automated collection: Technical and usage data collected automatically as you browse and interact with the 7bat platform, via server-side logging, session management tools, and first-party cookies.
• Payment processors: When you make a transaction via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the relevant payment provider passes transaction confirmation data to 7bat to reconcile your account balance. 7bat does not receive or store full card numbers or mobile banking PINs.
• Identity verification partners: Where 7bat uses a third-party identity verification service to conduct KYC checks, that provider may pass structured verification results (pass/fail, document type confirmed) to 7bat. The underlying document images are handled according to that provider's own data retention policy.
• Fraud and security tools: Automated risk-scoring systems that analyse login patterns, device fingerprints, and transaction behaviour to detect suspicious activity may collect technical data as a byproduct of their operation.

5 How We Use Your Personal Data

7bat uses the personal data it holds about you for the following purposes:

• Account management: To create and maintain your 7bat account, authenticate your identity at login, and manage your account preferences and settings.
• Transaction processing: To process deposit and withdrawal requests, maintain accurate BDT (৳) wallet balances, and reconcile transactions with payment providers including bKash, Nagad, Rocket, Upay, Visa, and Mastercard.
• Identity and age verification: To verify that you are aged 21 or above and that the identity details you provided at registration are accurate, in compliance with our age restriction policy.
• Responsible gaming: To monitor gambling patterns for indicators of problem gambling behaviour, to apply self-imposed deposit limits and self-exclusion requests, and to reach out proactively where our systems flag potential harm.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, bonus abuse, and other prohibited activities described in the Terms & Conditions.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and maintain records of communications in case of future escalation.
• Platform improvement: To analyse aggregated usage patterns and technical performance data in order to improve the platform experience, fix bugs, and prioritise new features.
• Legal and regulatory compliance: To comply with applicable legal obligations, including responding to lawful requests from law enforcement or regulatory authorities.
• Promotional communications: To send you relevant promotional offers, bonus notifications, and news about 7bat products — but only where you have opted in to receive such communications. You may unsubscribe at any time by contacting [email protected].

6 Legal Basis for Processing

7bat processes your personal data on the following legal bases, depending on the purpose of processing:

• Contractual necessity: Processing required to deliver the services you have contracted with 7bat to receive — including account management, payment processing, game access, and customer support — is carried out on the basis that it is necessary to perform our contract with you.
• Legitimate interests: Processing carried out for fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring is conducted on the basis of 7bat's legitimate interests in operating a safe, fair, and commercially sustainable platform. Where we rely on legitimate interests, we have assessed that these interests are not overridden by your privacy rights.
• Legal obligation: Processing required to comply with applicable legal obligations — including retaining transaction records and responding to lawful requests from authorities — is carried out on the basis of legal obligation.
• Consent: Where we send promotional communications or use non-essential cookies, we rely on your consent. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

7 Sharing Your Data with Third Parties

7bat does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual data protection obligations:

• Payment processors: bKash, Nagad, Rocket, Upay, and card payment gateway providers receive the transaction data necessary to process your deposit or withdrawal. These providers operate under their own privacy policies and are not permitted to use your data for any purpose beyond processing your transaction.
• Identity verification providers: Third-party KYC service providers who process document images and confirm identity verification results on 7bat's behalf. Data shared with these providers is limited to the documents and personal details required for the verification check.
• Game content providers: Certified game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier necessary to deliver the game content. They do not receive your full profile or financial data.
• Technology and infrastructure providers: Cloud hosting, content delivery, and platform infrastructure providers who process data on 7bat's behalf as data processors, under binding data processing agreements that restrict their use of your data to the services they are contracted to deliver.
• Law enforcement and regulatory authorities: Where 7bat is required by a lawful order, warrant, or legal process to disclose personal data to a government authority or law enforcement agency, we will comply with that obligation. Where legally permitted, 7bat will attempt to notify you of such a disclosure.
• Professional advisors: Lawyers, accountants, and auditors who are subject to confidentiality obligations and who require access to data in the context of providing professional services to 7bat.

In all cases where personal data is shared with a third party, 7bat takes reasonable steps to ensure that the recipient maintains appropriate technical and organisational security measures and processes your data only for the stated purpose.

8 Cookies & Tracking Technologies

7bat uses cookies and similar technologies to operate the platform, maintain session state, and analyse how the platform is used. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your login session, store your account preferences, and ensure that the platform behaves correctly across pages. These cookies cannot be disabled without impairing platform functionality.
• Performance and analytics cookies: First-party analytics cookies that collect anonymised data about how players navigate the platform — which pages are visited most frequently, where users exit, and how long sessions last. This data is used exclusively to improve the platform experience and is not shared with advertising networks.
• Functional cookies: Cookies that remember your display preferences, language setting, and any responsible gaming limit configurations you have saved, so they persist across sessions without you needing to reconfigure them each time.

7bat does not use third-party advertising cookies, social media tracking pixels, or cross-site retargeting technologies. You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to use the platform.

9 Data Retention

7bat retains personal data for only as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following general retention guidelines apply:

• Active account data: Personal and financial data associated with your active 7bat account is retained for the duration of your account's active status.
• Closed account data: Following account closure, 7bat retains core account records (identity, transaction history, and correspondence) for a minimum period necessary to satisfy legal obligations related to anti-money-laundering record-keeping and dispute resolution. After this period, data is securely deleted or irreversibly anonymised.
• KYC documents: Identity verification documents are retained for the period required by applicable law from the date of the last transaction or account closure, whichever is later.
• Support communications: Email and chat support records are retained for a period sufficient to resolve any open disputes or complaints, plus a reasonable period thereafter in case of re-escalation.
• Technical logs: Server access logs, IP logs, and security event logs are retained for a limited operational period, after which they are purged on a rolling basis.

10 Data Security

7bat implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data connections between your device and 7bat's servers, covering all pages and API endpoints.
• Encryption of sensitive data fields at rest within 7bat's database infrastructure, including financial account identifiers and identity document references.
• Role-based access controls that limit internal access to personal data to those team members who require it to perform their specific job functions.
• Regular security assessments and penetration testing of the platform infrastructure conducted by qualified security professionals.
• Automated monitoring systems that detect and alert the security team to unusual access patterns, potential intrusion attempts, and anomalous data access events in real time.
• Contractual data security obligations imposed on all third-party processors who handle 7bat player data on our behalf.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 7bat will take appropriate steps to contain the breach, assess the risk, and notify affected players in accordance with applicable legal requirements.

11 Your Data Rights

Subject to applicable law and certain limited exceptions, you have the following rights in respect of the personal data that 7bat holds about you:

• Right of access: You may request a copy of the personal data 7bat holds about you, including a description of the categories of data held, the purposes for which it is processed, and any third parties to whom it has been disclosed.
• Right to rectification: You may request that inaccurate personal data be corrected and that incomplete records be completed where this is relevant to how your data is being used.
• Right to erasure: In certain circumstances, you may request that 7bat delete your personal data. This right is subject to legal retention obligations — 7bat cannot delete data that it is legally required to retain, such as transaction records required for anti-money-laundering compliance.
• Right to restrict processing: You may request that 7bat restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
• Right to data portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling. 7bat will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, receiving promotional communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

To exercise any of these rights, please contact 7bat at [email protected] with a clear description of your request and your registered account username. We will respond within a reasonable timeframe and in any event within the period required by applicable law. We may ask you to verify your identity before processing a data rights request.

12 Children & Underage Players

The 7bat platform is strictly restricted to individuals aged 21 years or above. 7bat does not knowingly collect personal data from individuals under the age of 21, and no part of the 7bat platform is directed at or intended for use by minors.

If you are a parent or guardian and you believe that a person under your care has created a 7bat account or provided personal data to 7bat, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

Account holders are reminded that they are responsible for ensuring that no person under the age of 21 gains access to their 7bat account or login credentials, particularly on shared devices. Log out after every session on shared devices and do not save your password in shared browser profiles.

13 International Data Transfers

7bat operates as an international online betting platform and, as such, personal data may be transferred to and processed in countries outside Bangladesh in connection with the delivery of platform services. This may occur when:

• Data is stored on cloud infrastructure hosted in data centres outside Bangladesh.
• Identity verification providers or payment processors operate in jurisdictions outside Bangladesh.
• Game content providers such as Evolution Gaming or Pragmatic Play process session data on servers located outside Bangladesh.
• Disaster recovery or business continuity systems replicate data to geographically distributed infrastructure.

In all cases where personal data is transferred internationally, 7bat takes appropriate steps to ensure that the receiving jurisdiction or recipient organisation provides an adequate level of data protection, whether through contractual safeguards, certification frameworks, or applicable legal adequacy assessments.

14 Changes to This Policy

7bat reserves the right to update, amend, or replace this Privacy Policy at any time. When we make material changes — for example, changes to the categories of data we collect, the purposes for which we use it, or the third parties we share it with — we will take reasonable steps to notify registered players before the changes take effect. This may be done via email to your registered address or via an in-platform notification displayed at login.

The "Last Updated" date displayed at the top of this page and within the hero section above always reflects the date of the most recent revision. We encourage you to bookmark this page and review it periodically, particularly after receiving any policy update notification from 7bat.

Your continued use of the 7bat platform after any revised Privacy Policy has been published constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you must cease using the platform and may request account closure by contacting [email protected].

15 Contact Us

For all privacy-related enquiries, data subject access requests, correction requests, deletion requests, or complaints regarding how 7bat handles your personal data, please contact the 7bat data team using the details below:

• Email: [email protected]
• Support hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (BST, UTC+6)
• Platform: https://7bat.io

When submitting a data rights request, please include your registered account username, a clear description of the right you wish to exercise, and any supporting context that will help our team locate your records and process your request promptly. We aim to acknowledge all privacy enquiries within 24 hours and to provide a substantive response within the timeframe required by applicable law.