7u72 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1 Introduction

7u72 is an online betting and casino platform operating at 7u72.io, serving players primarily located in Bangladesh. We are committed to handling personal data responsibly, transparently, and in accordance with principles of data minimisation, purpose limitation, and security.

This Privacy Policy applies to all personal data collected through the 7u72 website, mobile browser interface, and any related services, communications, or support interactions. It applies to all registered players and to any visitor who browses the Platform without creating an account, to the extent that data is collected from such visitors through cookies and analytics tools.

Throughout this policy, "personal data" means any information that identifies or can reasonably be used to identify a living individual — including name, date of birth, contact details, payment information, device identifiers, and behavioural data generated through use of the Platform.

7u72 acts as the data controller in respect of all personal data described in this policy, except where data is processed directly by a third-party service provider acting as an independent data controller — in which case that provider's own privacy policy applies to that element of processing.

2 Data We Collect

7u72 collects personal data through several channels: directly from you when you register or interact with the Platform, automatically through technical tracking tools, and in limited circumstances from third-party sources such as payment processors or identity verification providers. The categories of data we collect are set out below.

2.1 Registration Data. When you create a 7u72 account, we collect the following mandatory information:

• Full legal name as it appears on your official identity document
• Date of birth (used to verify compliance with the 21+ age requirement)
• Residential address in Bangladesh (including division, district, and postal code)
• Email address
• Bangladeshi mobile phone number
• Username and hashed password

2.2 Identity Verification Data. To comply with anti-money-laundering obligations and to verify player age and identity, 7u72 may collect:

• Copy of National Identity Card (NID), passport, or driving licence
• Proof of residential address (utility bill, bank statement dated within 90 days)
• Selfie or live photograph for facial comparison, where required by our verification partner
• Source-of-funds documentation for high-value accounts

2.3 Financial and Transaction Data. When you make deposits or request withdrawals, we collect:

• bKash, Nagad, Rocket, or Upay mobile wallet numbers used for transactions
• Bank account details for bank transfer transactions
• Masked card numbers for Visa and Mastercard transactions
• Transaction amounts, dates, times, and reference numbers
• Account balance history and bonus fund records

2.4 Behavioural and Usage Data. As you use the Platform, we automatically collect:

• Pages visited, game sessions initiated, and bets placed
• Session duration, login and logout timestamps
• Search queries, filter selections, and navigation paths on the Platform
• Betting and gaming history including stakes, selections, and outcomes

2.5 Technical and Device Data. Our servers and analytics tools collect technical data including:

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Screen resolution and device language settings
• Cookie identifiers and session tokens
• Referral URL (the page from which you arrived at 7u72.io)

2.6 Communications Data. When you contact 7u72 support, we retain records of:

• Email correspondence sent to or received from [email protected]
• Live chat transcripts where applicable
• The nature of enquiries, complaints, and their resolution outcomes

3 How We Use Your Personal Data

The personal data 7u72 collects is used exclusively for the purposes described below. We do not use your data for purposes that are incompatible with those for which it was originally collected.

3.1 Marketing Communications. Where you have opted in to receive promotional messages from 7u72, we may send you emails regarding new games, seasonal offers (such as Eid and Pohela Boishakh promotions), BPL and IPL cricket betting specials, and other platform updates. You may withdraw your consent to marketing communications at any time by contacting [email protected] or updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

3.2 Automated Decision-Making. 7u72 uses automated systems to detect unusual account activity, assess fraud risk, and flag accounts for responsible gaming intervention. Where an automated process results in a material decision affecting your account — such as a temporary suspension or withdrawal hold — you have the right to request a manual human review by contacting support. Automated processes do not permanently close accounts without a subsequent human review.

4 Legal Basis for Processing

Every processing activity carried out by 7u72 rests on one or more of the following lawful bases:

• Contractual necessity: Processing required to perform the contract between 7u72 and the Player — including account management, payment processing, and bet settlement.
• Legal obligation: Processing required to comply with applicable legal requirements — including identity verification, anti-money-laundering screening, and age verification.
• Legitimate interests: Processing carried out in the legitimate interests of 7u72 or third parties — including fraud prevention, platform security, and analytics — where those interests are not overridden by the Player's rights and freedoms.
• Consent: Processing based on your explicit, freely given, and revocable consent — including the sending of marketing communications and the use of non-essential cookies.

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. Where processing is required for contractual or legal purposes, withdrawal of consent for that processing may mean that 7u72 is unable to continue providing services to your account.

5 Data Sharing and Third Parties

5.1 No Sale of Personal Data. 7u72 does not sell, rent, lease, or otherwise commercially transfer your personal data to any third party. This is an unconditional commitment. Your data is not a commercial product.

5.2 Operational Partners. To deliver the services described in these terms, 7u72 shares data with a limited set of trusted operational partners acting as data processors on our behalf. These partners are contractually bound to process data only on 7u72's instructions, to maintain appropriate security standards, and to delete data upon the conclusion of their engagement. Categories of partner include:

• Payment processors: bKash, Nagad, Rocket, Upay, and card payment gateway providers — to authenticate and execute financial transactions.
• Identity verification services: Independent KYC providers who validate the authenticity of identity documents submitted during account verification.
• Fraud detection services: Automated risk-scoring services that analyse transaction and behavioural patterns to identify suspicious activity.
• Analytics providers: Aggregated, anonymised usage data may be processed by analytics platforms to help 7u72 understand Platform performance. No personally identifiable information is included in this data.
• Game studios: Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe receive session tokens to authenticate your game sessions. They do not receive your full registration data or financial details.

5.3 Legal Disclosure. 7u72 may disclose personal data to law enforcement authorities, regulatory bodies, or courts where required to do so by applicable law, a valid court order, or a formal regulatory request. In such cases, 7u72 will disclose only the minimum data required to satisfy the legal obligation and, where legally permissible, will notify the affected Player of the disclosure.

5.4 Business Transfers. In the event of a merger, acquisition, or transfer of all or a substantial part of 7u72's business or assets, personal data held by 7u72 may form part of the transferred assets. In such circumstances, 7u72 will take reasonable steps to ensure that the acquiring party commits to processing personal data in a manner consistent with this Privacy Policy, and will notify affected players before their data is transferred to a new data controller.

6 Cookies and Tracking Technologies

6.1 What Are Cookies. Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, maintain your session state, and gather data about how the site is used. 7u72 uses both first-party cookies (set directly by 7u72.io) and a limited set of third-party cookies (set by operational partners such as analytics providers).

6.2 Categories of Cookies Used by 7u72.

6.3 Managing Cookies. You can control and delete cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, and set preferences for specific websites. Note that disabling strictly necessary cookies may prevent you from logging into your 7u72 account or using certain Platform features. Instructions for managing cookies in common browsers (Chrome, Firefox, Safari, Edge) are available via those browsers' help documentation.

6.4 No Advertising Cookies. 7u72 does not use advertising cookies, retargeting pixels, or third-party ad network trackers on the Platform. No data from your 7u72 session is shared with advertising platforms for the purpose of serving you targeted advertisements on other websites.

7 Data Retention

7.1 Active Accounts. While your 7u72 account remains open, we retain all personal data associated with that account for as long as necessary to provide services, comply with legal obligations, and manage any ongoing disputes or investigations.

7.2 Closed Accounts. Following account closure — whether requested by you or initiated by 7u72 — personal data is retained for a minimum period of five (5) years from the date of closure. This retention period reflects legal obligations relating to anti-money-laundering record-keeping and the potential need to respond to regulatory enquiries or legal proceedings arising from prior account activity.

7.3 Verification Documents. Identity verification documents submitted for KYC purposes are retained for the duration of the active account relationship and for five (5) years following account closure, consistent with financial regulation record-keeping requirements.

7.4 Marketing Data. Where you have consented to receive marketing communications, your contact data used for that purpose is retained until you withdraw your consent, at which point it is removed from active marketing lists within thirty (30) days. A suppression record may be retained to ensure no further marketing is sent inadvertently.

7.5 Deletion. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Backups containing personal data are managed on a rolling deletion cycle consistent with the retention periods described above.

8 Data Security

8.1 Technical Measures. 7u72 implements a layered set of technical security controls to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• TLS 1.2/1.3 encryption for all data in transit between your device and 7u72 servers
• AES-256 encryption for sensitive data at rest, including financial records and identity documents
• Bcrypt hashing for all stored account passwords — 7u72 staff cannot view your plaintext password
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Intrusion detection systems and 24/7 security monitoring of production infrastructure
• Regular penetration testing and vulnerability assessments by independent security specialists
• Web application firewall (WAF) protection against common attack vectors

8.2 Organisational Measures. In addition to technical controls, 7u72 maintains organisational safeguards including staff training on data handling obligations, clear data access policies, and incident response procedures.

8.3 Data Breach Response. In the event of a personal data breach that poses a risk to affected individuals, 7u72 will take immediate steps to contain the breach and, where legally required or reasonably appropriate, notify affected players at the earliest practicable opportunity. Notifications will be sent to the email address registered on your 7u72 account and will include a description of the breach, the data involved, and the steps being taken to mitigate any harm.

9 Your Data Rights

As a Player whose personal data is processed by 7u72, you hold the following rights in respect of that data. Requests to exercise any of these rights should be submitted to [email protected]. 7u72 will respond to all rights requests within thirty (30) calendar days of receipt. No fee is charged for standard requests; 7u72 reserves the right to charge a reasonable administrative fee for manifestly unfounded or repetitive requests.

9.1 Identity Verification for Rights Requests. To protect your personal data, 7u72 must verify your identity before acting on any rights request. You will be asked to confirm your registered email address and may be asked to provide additional verification if the request involves sensitive data or account closure.

9.2 Limitations. Certain rights are not absolute. The right to erasure, for example, cannot be exercised in respect of data that 7u72 is legally required to retain under anti-money-laundering legislation. Where 7u72 is unable to fulfil a rights request in full, we will explain the reason for any limitation in our response.

10 Children and Minors

The 7u72 Platform is strictly intended for adults aged 21 years and above. 7u72 does not knowingly collect personal data from individuals under the age of 21. The registration process requires all players to confirm their date of birth, and 7u72 conducts age verification checks to enforce this requirement.

If 7u72 becomes aware that personal data has been collected from a person under the age of 21, that account will be closed immediately, all associated data will be deleted to the extent consistent with our legal obligations, and any deposits will be refunded to the originating payment method where technically feasible.

If you believe that a person under the age of 21 has registered an account on the 7u72 Platform, please contact us immediately at [email protected]. All such reports are treated with urgency and confidentiality.

11 Third-Party Links and Integrations

The 7u72 Platform may contain references to third-party services such as game studios (Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe) whose game interfaces are embedded within the Platform. While 7u72 takes care to partner only with reputable providers, we have no control over the privacy practices of these third parties in their own capacity as independent data controllers.

When you interact with an embedded game, your session token and gameplay data may be transmitted to the game studio's servers to deliver the game experience. The game studio's own privacy policy governs that element of data processing. 7u72 recommends that players review the privacy policies of game studios whose content they use regularly.

7u72 is not responsible for the data practices of third-party services, and this Privacy Policy does not extend to any website, platform, or service that is not directly operated by 7u72.

12 Updates to This Privacy Policy

12.1 Right to Update. 7u72 reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our services. The date of the most recent update is stated at the top of this document and within the Table of Contents.

12.2 Notification of Material Changes. Where a proposed update constitutes a material change to how personal data is processed — such as introducing a new category of data use, sharing data with a new category of third party, or changing the basis on which marketing is sent — 7u72 will provide advance notice to affected players by posting a prominent notice on the Platform and, where practicable, by sending an email notification to the registered account email address at least fourteen (14) days before the change takes effect.

12.3 Continued Use. Your continued use of the 7u72 Platform following the effective date of an updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not accept the updated policy, you should cease using the Platform and request account closure in accordance with the Terms & Conditions.

13 Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a complaint about how 7u72 has handled your personal data, please contact our support team using the details below.

All privacy-related enquiries are handled by the 7u72 data team and will receive a substantive response within thirty (30) calendar days. For time-sensitive matters such as suspected unauthorised access to your account, please indicate the urgency clearly in your message subject line so that the request can be prioritised.

If you are unsatisfied with 7u72's response to a privacy complaint, you have the right to escalate your complaint to an appropriate data protection supervisory authority or seek independent legal advice. 7u72 will cooperate fully with any regulatory investigation arising from a complaint about our data practices.

For general platform assistance that is not privacy-related, please refer to the FAQ page or contact our standard support team at the same email address above.