b7b7 Privacy Policy

Who We Are

b7b7 ("we", "us", "our", "the Platform") operates an online casino and sports betting platform accessible at b7b7.io, serving players primarily located in Bangladesh. This Privacy Policy describes how b7b7 collects, uses, discloses, stores, and protects personal data submitted by users ("you", "your", "the Player") in connection with your registration, account use, deposits, wagers, withdrawals, and any other interaction with the Platform.

By registering an account, accessing the Platform, or otherwise providing personal information to b7b7, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your data as described herein. If you do not agree, you must discontinue use of the Platform immediately.

All formal data-related correspondence should be directed to our dedicated support channel at [email protected]. Our support team operates 24 hours a day, 7 days a week, in both English and Bengali, and observes Bangladesh Standard Time (BST, UTC+6).

Data We Collect

b7b7 collects personal data through multiple channels: directly from you at registration and during account use, automatically through your interaction with the Platform, and occasionally from third-party verification and payment services. The categories of personal data we collect are set out below.

2.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you are at least 21 years of age).
• Residential address, including city, district, and postal code.
• Mobile phone number (used for OTP-based two-factor authentication and account communications).
• Email address (used for account notifications, support correspondence, and, where consented, marketing communications).
• Username and encrypted password hash.

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification: National Identity Card (NID), passport, or driving licence.
• Proof of address documents where required for enhanced due diligence.
• Proof of payment method (e.g., a screenshot of a bKash or Nagad wallet registered in your name) to confirm that the payment source belongs to you.

2.3 Financial and Transaction Data

• Deposit amounts, timestamps, and payment method identifiers (bKash account number, Nagad wallet reference, Rocket, Upay, or bank transaction ID).
• Withdrawal requests, including destination wallet or bank account details.
• Account balance history and bonus credit records.
• Wagering activity: game played, stake amount, outcome, and timestamp.

2.4 Technical and Device Data

• IP address at the time of login and at the time of each significant transaction.
• Device type, operating system, browser type and version.
• Session duration, pages visited, and interaction events within the Platform.
• Geolocation data derived from IP address (country and city level only — not precise GPS coordinates).

2.5 Communications Data

• Records of live chat transcripts, email correspondence, and support ticket exchanges between you and b7b7 staff.
• Survey responses or feedback you voluntarily provide to b7b7.

How We Use Your Data

b7b7 uses the personal data we collect for the following documented purposes. We do not use your data for any purpose that is incompatible with the purposes listed here without first obtaining your additional consent or establishing a separate legal basis.

Where b7b7 relies on legitimate interest as a legal basis for processing, we have conducted a balancing assessment and are satisfied that our legitimate interests are not overridden by your interests or fundamental rights. You may request details of that assessment by contacting [email protected].

Legal Basis for Processing

b7b7 processes your personal data only where a lawful basis exists for doing so. The four primary legal bases we rely on are described below.

Contractual Necessity. The majority of our processing is necessary to perform our contract with you — that is, to provide you with a functional, secure gaming account, to accept deposits, to settle bets, and to process withdrawals. Without this processing, we cannot deliver the services you have registered to use.

Legal Obligation. Certain processing activities are required by law. These include age verification, KYC identity checks, anti-money laundering transaction monitoring, and the retention of financial records for specified periods. b7b7 cannot waive these obligations at a player's request.

Legitimate Interest. We process certain data categories — notably device and IP data for fraud prevention, session data for responsible gaming analysis, and anonymised analytics for platform improvement — on the basis of our legitimate interest in operating a secure, fair, and compliant gaming platform. We apply a proportionality test to such processing and take steps to minimise privacy impact.

Consent. Where we rely on consent — principally for marketing communications and for the use of non-essential cookies — we will always obtain your affirmative opt-in before processing begins. You may withdraw consent at any time without affecting the lawfulness of prior processing. Withdrawal of marketing consent will not affect your ability to use the Platform.

Sharing Your Data

b7b7 does not sell your personal data. We share data only in the limited circumstances described below, and only with recipients who are subject to appropriate data protection obligations.

Payment Processors. To facilitate deposits and withdrawals, b7b7 shares the minimum necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank. These providers receive only the data required to confirm and settle the relevant transaction.

Game and Technology Providers. b7b7's gaming library is powered by certified third-party studios including Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, NetEnt, Spribe, and Play'n GO. These providers may process anonymised session identifiers to deliver game content and to operate their independently audited RNG systems. They do not receive your name, address, or payment information.

Identity Verification Services. For KYC purposes, b7b7 may use third-party identity verification providers to authenticate documents you submit. These providers process your identity documents strictly for verification purposes and are contractually prohibited from retaining or using your data for any other purpose.

Legal and Regulatory Authorities. b7b7 may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities where required to do so by applicable law, court order, or regulatory directive. We will not notify you of such disclosures where doing so would be unlawful or would compromise an ongoing investigation.

Business Transfers. In the event that b7b7 undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will provide notice of any such transfer and the privacy choices available to you at that time.

Cookies and Tracking Technologies

b7b7 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in, security tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings and your preferred deposit method, so you do not need to re-enter them on each visit.
• Analytics Cookies: Collect anonymised data about how players navigate and use the Platform — for example, which game categories receive the most visits — to help us improve the user experience. These are only set with your consent.
• Marketing Cookies: Used to deliver relevant promotional content, including bonus offers tied to BPL season, Eid, and T20 World Cup campaigns. These are only set with your explicit opt-in consent and may be withdrawn at any time.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent the Platform from functioning correctly. b7b7 does not use fingerprinting technologies or supercookies designed to circumvent browser-based cookie controls.

Data Retention

b7b7 retains personal data for only as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and identity data: Retained for the lifetime of your account and for a minimum of five (5) years following permanent account closure, in compliance with anti-money laundering record-keeping obligations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, as required for financial crime prevention and tax compliance purposes.
• KYC documents: Retained for the duration of your account and for five (5) years following account closure.
• Support communications: Retained for two (2) years from the date of the last correspondence, unless the matter is subject to ongoing dispute resolution, in which case records are retained until the dispute is fully resolved.
• Device and session logs: Retained for twelve (12) months for security monitoring purposes, after which they are anonymised or deleted.
• Marketing consent records: Retained until you withdraw consent and for one (1) year thereafter as evidence of your prior consent.

On expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identified or identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical analysis purposes.

Data Security

b7b7 implements a layered security architecture designed to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, and destruction. Key security measures in place include:

• Transport Layer Security (TLS 1.3): All data in transit between your device and our servers is encrypted using TLS 1.3 with 256-bit AES cipher suites. Older, insecure protocol versions (SSL, TLS 1.0, TLS 1.1) are disabled.
• Database Encryption: Personally identifiable information stored in our databases is encrypted at rest. Encryption keys are stored separately from the encrypted data and are subject to rotation policies.
• Access Controls: Internal access to personal data is governed by role-based access control (RBAC). Only staff whose job function requires access to specific data categories are granted the necessary permissions. All access events are logged and subject to periodic audit.
• Two-Factor Authentication (2FA): b7b7 offers OTP-based two-factor authentication for all player accounts. We strongly encourage all players to enable 2FA to protect against unauthorised account access.
• Penetration Testing: b7b7 engages independent security professionals to conduct periodic penetration tests of the Platform infrastructure. Identified vulnerabilities are remediated according to a risk-prioritised schedule.
• Incident Response: b7b7 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to affected individuals, b7b7 will notify the relevant players promptly and take all reasonable steps to contain and remediate the breach.

While b7b7 employs robust technical and organisational security measures, no system connected to the internet can guarantee absolute security. You play an important role in keeping your account secure: always use a strong, unique password, enable 2FA, and contact [email protected] immediately if you suspect unauthorised access to your account.

Your Rights

Subject to applicable law and certain limitations related to our legal obligations, you have the following rights with respect to the personal data b7b7 holds about you:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: In certain circumstances, you may request that we delete your personal data. Note that this right is limited where we are required by law to retain records — for example, financial transaction records subject to anti-money laundering retention obligations cannot be deleted on request.
• Right to Restriction: You may request that we temporarily pause our processing of your data while the accuracy or lawfulness of our processing is under review.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interest. b7b7 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Subject Request". We will acknowledge your request within 48 hours and respond in full within 30 days. In complex cases we may extend this period by a further 30 days with prior notice to you.

Children and Minors

The b7b7 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect or process personal data relating to persons under the age of 21. Registration is prohibited for anyone who does not meet this age threshold, and b7b7 enforces this requirement through age declaration at registration and document-based KYC verification at the withdrawal stage.

If b7b7 becomes aware that personal data has been collected from a person under the age of 21 without appropriate verification, we will take immediate steps to close the relevant account, delete the associated data to the extent not required by law, and refund any real-money balance to the funding payment method where this is operationally possible.

If you believe that a minor has registered an account on the b7b7 Platform, please contact us immediately at [email protected]. We treat such reports as the highest priority and will investigate within 24 hours of receipt.

Third-Party Links

The b7b7 Platform may contain references to third-party game providers such as Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, NetEnt, Spribe, and Play'n GO, as well as payment partners such as bKash and Nagad. While these providers are integrated directly into the b7b7 Platform environment, each operates under its own privacy and data protection policies for the purposes of its own business operations.

b7b7 is not responsible for the privacy practices of third-party providers beyond the contractual data processing obligations we impose on them. We encourage you to review the privacy policies of any third-party service you interact with independently. b7b7 does not include outbound links to unrelated external websites on the Platform.

Changes to This Policy

b7b7 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When material changes are made, we will notify registered players by email to the address on file and/or by posting a prominent notice on the Platform. The revised policy will clearly state the date from which it takes effect.

Your continued use of the Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you must discontinue use of the Platform and may request account closure by contacting our support team. The most current version of this Privacy Policy will always be available at b7b7.io/privacy-policy.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way b7b7 processes your personal data, please contact our support team through the following channels:

• Email: [email protected] — data-related enquiries are treated as priority and receive a response within 24 hours.
• Live Chat: Available 24/7 directly on the b7b7 Platform — the fastest channel for urgent privacy concerns.
• Support Hours: 24 hours a day, 7 days a week, including all Bangladeshi public holidays. Bangladesh Standard Time (BST, UTC+6) applies.
• Language: Support for privacy enquiries is available in both English and Bengali.

For formal data subject rights requests (access, erasure, portability, etc.), please send your written request to [email protected] with the subject line "Data Subject Request" and include your registered username and a brief description of your request. We will acknowledge receipt within 48 hours.