7c99 Privacy Policy

1 Introduction

7c99 ("we", "us", "our", or the "Platform") operates the online casino and sports betting service available at 7c99.io. We are firmly committed to protecting the privacy of all individuals who interact with our platform, whether as registered players, prospective members, or casual visitors.

This Privacy Policy sets out in full and transparent detail: the categories of personal data we collect; the purposes for which that data is processed; the lawful basis on which we rely to process it; the circumstances under which we may share it with third parties; and the rights that individuals hold in respect of their personal data under applicable data protection law.

This policy applies to all personal data processed by 7c99 in connection with the operation of its online platform, including data collected through the 7c99.io website, any mobile-optimised version of that website, and all communications between players and 7c99 customer support agents. By registering an account, making a deposit, or otherwise using the 7c99 platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the data practices described herein.

7c99 serves players primarily based in Bangladesh. We are mindful of the expectations and legal framework applicable in the Bangladesh market and we process all personal data with a high standard of care, diligence, and transparency consistent with internationally recognised data protection principles.

2 Data We Collect

7c99 collects only the personal data that is necessary for the legitimate operation of its platform, the fulfilment of its legal obligations, and the delivery of a safe and personalised gaming experience. The categories of personal data we may collect include the following:

Category	Examples of Data Points	Collection Trigger
Identity Data	Full legal name, date of birth, gender, National ID (NID) number, passport number	Account registration and KYC verification
Contact Data	Email address, mobile phone number, residential address, city (e.g., Dhaka, Chittagong, Sylhet)	Account registration, support interactions
Financial Data	bKash account number, Nagad account number, Rocket number, Upay number, bank account details, Visa/Mastercard last 4 digits	Deposit and withdrawal processing
Gaming Activity Data	Game history, betting records, wager amounts (৳), wins and losses, session durations, game preferences	Automatically recorded during platform use
Technical Data	IP address, device type and model, operating system, browser type, screen resolution, time zone (BST, UTC+6)	Automatically collected on site visit
Usage Data	Pages visited, links clicked, features accessed, referral source, session timestamps	Automatically collected via cookies and analytics
Communications Data	Live chat transcripts, email correspondence, support ticket content	Customer support interactions
Verification Documents	Scanned copies of NID, passport, utility bill, bank statement, payment method screenshots	KYC and enhanced due diligence processes

3 How We Collect Your Data

7c99 collects personal data through the following channels and mechanisms:

• Direct Submission: Data you provide directly when registering an account, completing KYC verification, submitting a deposit or withdrawal request, contacting customer support, or responding to a survey or promotion.
• Automated Collection: Data collected automatically when you visit the 7c99.io website or use any feature of the platform. This includes data collected via cookies, web beacons, server logs, and similar tracking technologies. See Section 7 (Cookies and Tracking) for full details.
• Third-Party Sources: Data received from identity verification agencies, payment processing partners (including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card networks), fraud detection service providers, and analytics platforms. Where 7c99 receives data from third parties, it ensures those parties have obtained the necessary consents and authorisations to share that data.
• Game Providers: Game activity data generated during your play sessions on games hosted by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other integrated providers. This data is transmitted to 7c99 in real time and recorded in your account gaming history.

4 How We Use Your Data

7c99 uses the personal data it collects for the following specific and documented purposes:

• Account Management: To create, maintain, and administer your 7c99 player account, including processing your registration, verifying your identity, and communicating essential account-related information.
• Payment Processing: To process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and others), to verify payment ownership, and to maintain accurate transaction records.
• Legal Compliance: To fulfil our obligations under applicable anti-money laundering (AML), counter-terrorist financing (CTF), and know-your-customer (KYC) regulations. This includes verifying the identity of all players prior to their first withdrawal and monitoring transactions for suspicious patterns.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account takeover attempts, collusion, bonus abuse, and other forms of misconduct that could harm players or the integrity of the platform.
• Responsible Gaming: To administer and enforce responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion. Where a player has self-excluded, their data is retained and used specifically to prevent re-registration during the exclusion period.
• Personalisation: To tailor the 7c99 gaming experience to your preferences, including recommending games and promotions relevant to your playing history and activity patterns — for example, featuring BPL cricket markets to players who regularly wager on cricket events.
• Marketing Communications: To send you promotional offers, bonus notifications, and seasonal campaign messages (such as Eid promotions, Pohela Boishakh offers, and BPL season incentives) where you have given your explicit consent to receive such communications. You may withdraw this consent at any time by contacting support at [email protected].
• Platform Improvement: To analyse usage patterns, identify technical issues, optimise the user interface, and improve the overall quality and reliability of the 7c99 platform based on aggregated and anonymised behavioural data.
• Customer Support: To respond to your queries, complaints, and formal escalations, and to maintain a record of all support interactions for quality assurance and dispute resolution purposes.

5 Legal Basis for Processing

For each category of personal data that 7c99 processes, we rely on one or more of the following lawful bases as recognised under internationally accepted data protection frameworks:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and 7c99 — specifically, the Terms & Conditions you accepted upon registration. This covers account management, payment processing, game delivery, and customer support.
• Legal Obligation: Processing is required for 7c99 to comply with applicable legal obligations, including AML/KYC regulation, financial record-keeping requirements, and age verification obligations.
• Legitimate Interests: Processing is necessary for the purposes of 7c99's legitimate interests — including fraud prevention, platform security, responsible gaming programme administration, and general platform improvement — provided those interests are not overridden by your rights and freedoms.
• Consent: Processing is based on your freely given, specific, informed, and unambiguous consent. This basis applies specifically to marketing communications. Where consent is the stated basis, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing and Disclosure

7c99 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share personal data only in the following limited and documented circumstances:

• Payment Processors: We share financial data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard, solely to the extent necessary to process your transactions. These providers are contractually bound to use your data only for the stated payment processing purpose.
• Game Providers: We share player session identifiers and game activity data with integrated game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) to enable game delivery and resolve disputes. These providers do not receive your identity or contact data unless required by law.
• Identity Verification Agencies: We share identity documents and verification data with third-party KYC service providers for the purpose of document authentication and age verification. These providers are contractually prohibited from retaining or repurposing your documents.
• Fraud and AML Screening Services: We share transaction data and, where required, identity data with fraud detection and anti-money laundering screening services to fulfil our legal obligations and protect the integrity of the platform.
• Analytics Providers: We share anonymised and aggregated usage data with analytics platforms to understand platform performance and user behaviour. No personally identifiable information is shared in this context.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other competent authorities where we are required to do so by applicable law, court order, or regulatory direction. In such cases, 7c99 will disclose only the minimum data necessary to satisfy the legal requirement.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of 7c99's business, personal data held by 7c99 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and provided with information about their options prior to the transfer taking effect.

7 Cookies and Tracking

The 7c99.io website uses cookies and similar tracking technologies to deliver core platform functionality, maintain your login session, remember your preferences, and collect anonymised usage analytics. By continuing to use the 7c99 website, you consent to the use of cookies as described in this section.

The following categories of cookies are used on the 7c99 platform:

• Strictly Necessary Cookies: These cookies are essential for the website to function. They enable core features such as session management, login state persistence, security token validation, and load balancing. These cookies cannot be disabled without rendering the platform unusable.
• Functional Cookies: These cookies remember your preferences and settings — such as your preferred language, display configuration, and responsible gaming limit values — so that you do not need to re-enter them on each visit.
• Analytics Cookies: These cookies collect anonymised information about how visitors interact with the 7c99 website — such as which pages are visited most frequently, how long sessions last, and which game categories receive the most engagement. This data is used exclusively to improve the platform experience and is not linked to identifiable individuals.
• Marketing Cookies: Where you have provided consent to marketing communications, these cookies help 7c99 deliver relevant promotional content based on your browsing and gaming activity. You may withdraw your consent to marketing cookies at any time.

You may manage your cookie preferences through your browser settings. Please note that disabling functional or strictly necessary cookies may impair your ability to use certain features of the 7c99 platform. Standard browser options for cookie management are available in all major browsers including Chrome, Firefox, Safari, and Edge.

8 Data Retention

7c99 retains personal data only for as long as is necessary for the purposes for which it was collected, or for such longer period as is required by applicable law. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your account's active status and for a minimum of five (5) years following permanent account closure. This retention period reflects AML and KYC record-keeping obligations.
• Financial and Transaction Data: Retained for a minimum of seven (7) years following the date of each transaction, in accordance with financial record-keeping requirements.
• Gaming Activity Records: Retained for a minimum of five (5) years. Gaming records may be required for dispute resolution, regulatory audit, or responsible gaming purposes.
• Customer Support Correspondence: Retained for a minimum of three (3) years following the resolution of each support interaction, to support quality assurance processes and formal complaint escalation.
• Self-Exclusion Data: Retained indefinitely for players who have elected permanent self-exclusion, to prevent re-registration. Data relating to fixed-term self-exclusion is retained for the duration of the exclusion period plus five (5) years.
• Marketing Consent Records: Retained for as long as you remain a registered player and for three (3) years following account closure, to demonstrate compliance with marketing consent obligations.

9 Data Security

7c99 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and the 7c99 platform is encrypted using 256-bit SSL/TLS technology. This ensures that your personal and financial data cannot be intercepted in transit.
• Encrypted Data Storage: Sensitive data fields — including payment account numbers and identity document details — are stored in encrypted form at rest using AES-256 encryption. Encryption keys are managed under a strict key management policy with regular rotation.
• Access Controls: Access to personal data within 7c99's internal systems is restricted on a strict need-to-know basis using role-based access control (RBAC). All staff with access to personal data are bound by confidentiality obligations.
• Multi-Factor Authentication (MFA): All internal administrative access to systems containing personal data requires multi-factor authentication. We strongly recommend that players also enable any available two-step verification options on their 7c99 accounts.
• Penetration Testing and Vulnerability Management: 7c99's platform undergoes regular third-party security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential security weaknesses before they can be exploited.
• Incident Response: 7c99 maintains a documented data breach response plan. In the event of a security incident affecting your personal data, we will notify affected individuals and relevant authorities in accordance with applicable law and within the timeframes prescribed therein.

10 Your Data Rights

As an individual whose personal data is processed by 7c99, you hold the following rights under applicable data protection law. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond to all verified requests within 30 days.

• Right of Access: You have the right to request a copy of all personal data that 7c99 holds about you. We will provide this in a clear, structured format within 30 days of receiving your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. For straightforward corrections (such as a change of address), you may also update your details directly via your account dashboard.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing and there is no overriding legitimate interest. Please note that this right is subject to our legal data retention obligations described in Section 8.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while we investigate the accuracy of data you have disputed.
• Right to Data Portability: Where processing is based on your consent or on contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit it to another data controller.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on 7c99's legitimate interests. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out before the withdrawal.

11 Third-Party Services

The 7c99 platform integrates with a number of third-party service providers to deliver its full suite of gaming and payment services. While 7c99 carefully vets all third-party partners and imposes contractual data processing obligations on each of them, please be aware that these third parties operate under their own privacy policies in respect of any data processed independently outside of their contractual engagement with 7c99.

Third-party service categories integrated with the 7c99 platform include: game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi); mobile payment processors (bKash, Nagad, Rocket, Upay); card payment networks (Visa, Mastercard); banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank); identity verification and KYC platforms; fraud and AML screening services; and web analytics providers.

7c99 is not responsible for the privacy practices of any third-party service outside the scope of our contractual relationship with them. We recommend that you review the relevant privacy policies of any third-party service provider whose platform you access independently of 7c99 — for example, your bKash or Nagad mobile application.

12 Children and Minors

7c99 operates exclusively as an adult gaming platform and enforces a strict minimum age of 21 years for all players. We do not knowingly collect personal data from any individual under the age of 21, and we do not direct any of our content, marketing, or services at minors.

If 7c99 becomes aware — through the KYC verification process, a player report, or any other means — that personal data has been collected from an individual under the age of 21, that account will be immediately and permanently closed, all data associated with that account will be reviewed and handled in accordance with applicable child protection obligations, and all deposits will be returned via the original payment method where technically feasible.

13 Changes to This Policy

7c99 reserves the right to update, revise, or replace this Privacy Policy at any time in response to changes in applicable law, changes in our data processing practices, or changes in the services we offer. When material changes are made, the revised policy will be published on the 7c99 platform with an updated effective date prominently displayed at the top of the document.

Where required by applicable law, we will notify affected players of material changes to this Privacy Policy by email to the address registered on their account, or via a prominent notification on the platform, in advance of the changes taking effect. Your continued use of the 7c99 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which 7c99 processes your personal data, please contact our team using the details below. All privacy-related enquiries will be handled with strict confidentiality and in accordance with applicable data protection law.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Rights Requests: "Data Rights Request"
• Subject Line for Privacy Enquiries: "Privacy Enquiry"
• Response Time: Within 5 business days for general enquiries; within 30 days for formal data rights requests
• Support Hours: 24 hours a day, 7 days a week including public holidays
• Languages: English and Bengali