c7c7c7 Privacy Policy

c7c7c7 is Bangladesh's premier online casino and cricket betting platform. We are committed to protecting the privacy and personal data of all individuals who interact with our Platform, whether as registered players, visitors, or any other capacity. This Policy applies to all personal data collected through our website at https://c7c7c7.net, through our customer support channels, and through any other interaction you have with c7c7c7.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy. Together, these documents form the complete framework governing your relationship with c7c7c7. Where this Policy refers to "personal data", we mean any information that can identify you as an individual, either directly or in combination with other information we hold.

c7c7c7 takes its data protection obligations seriously. We apply appropriate technical and organisational measures to safeguard your personal data against unauthorised access, loss, or misuse. We process your data only for specific, legitimate purposes and retain it only for as long as necessary to fulfil those purposes or as required by applicable regulations.

c7c7c7 collects personal data through several channels: information you provide directly during registration and ongoing account use, information generated automatically through your use of the Platform, and information we may receive from third-party service providers such as payment processors. The categories of data we collect are described below.

We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data unless specifically required for responsible gaming self-exclusion purposes, in which case such data is handled with the utmost care and subject to additional safeguards.

c7c7c7 uses the personal data we collect for specific, legitimate purposes. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we use your personal data are as follows:

• Account Management: To register your account, verify your identity, maintain your account profile, and manage your ongoing relationship with the Platform.
• Service Delivery: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard; to credit winnings; and to deliver all gaming and betting services you access through the Platform.
• Identity Verification (KYC): To comply with our obligations to verify the identity and age of all registered players and to prevent underage gambling. Players must be 18 years or older to use the c7c7c7 Platform.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised account access, and other security threats. This includes monitoring transaction patterns, login activity, and gameplay behaviour for anomalies.
• Responsible Gaming: To monitor gambling behaviour for signs of problem gambling, to apply self-imposed limits and self-exclusion requests, and to proactively reach out to players who may be exhibiting concerning patterns of behaviour.
• Customer Support: To respond to your enquiries, complaints, and support requests, and to maintain a record of our communications for quality assurance and dispute resolution purposes.
• Legal Compliance: To fulfil our obligations under applicable laws and regulations, including anti-money-laundering (AML) requirements and any lawful requests from competent authorities.
• Platform Improvement: To analyse aggregated, anonymised usage data to understand how players interact with the Platform and to improve the quality, performance, and range of our services.
• Marketing Communications: Where you have provided consent, to send you information about promotions, bonuses, and new features at c7c7c7. You may withdraw consent at any time by contacting our support team or using the unsubscribe link in any marketing email.

c7c7c7 processes your personal data on the following legal grounds, depending on the specific purpose of the processing activity:

• Contractual Necessity: Processing your registration data, financial transaction data, and gaming activity records is necessary to perform the contract between you and c7c7c7 — that is, to provide you with the services you have requested through your account.
• Legal Obligation: Identity verification (KYC), AML monitoring, and age verification are carried out to comply with our legal obligations under applicable regulatory requirements.
• Legitimate Interests: Fraud prevention, Platform security monitoring, and anonymised analytics are carried out on the basis of our legitimate interests in operating a safe, reliable, and commercially viable gaming Platform, provided that those interests are not outweighed by your rights and interests.
• Consent: Where we send marketing communications, we do so on the basis of your explicit consent. You retain the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

c7c7c7 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard, for the purpose of processing deposits and withdrawals. These providers receive only the transaction data necessary to process payments and operate under their own privacy and security frameworks.
• Game Providers: Certified game studios including Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, and Microgaming may receive session and gameplay data necessary to deliver their game services within the Platform. These providers are contractually bound to process such data only for agreed service purposes.
• Identity Verification Services: Third-party KYC and age-verification service providers who assist us in verifying the identity and age of our registered players.
• Fraud Prevention Services: Specialist fraud detection and AML screening service providers who help us identify and prevent financial crime on the Platform.
• Regulatory & Law Enforcement Authorities: Where required by applicable law, court order, or legitimate regulatory request, c7c7c7 may disclose personal data to competent authorities. We will always assess any such request for legal validity before complying.
• Professional Advisers: Legal, financial, and compliance advisers who are bound by professional confidentiality obligations and who require access to certain data to provide their services to c7c7c7.

c7c7c7 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate the Platform effectively, maintain your session, and collect anonymised analytics data. Cookies are small text files placed on your device by your browser when you visit the Platform.

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, please note that disabling essential cookies will impair your ability to log in and use the c7c7c7 Platform. c7c7c7 does not use advertising cookies or allow third-party advertising networks to place cookies on the Platform.

c7c7c7 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account & Registration Data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, to comply with AML and record-keeping obligations.
• KYC Verification Documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later, in accordance with applicable AML regulations.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction, as required by standard financial record-keeping regulations.
• Gaming & Betting History: Retained for five (5) years from the date of each gaming session or wager, for dispute resolution, audit, and responsible gaming monitoring purposes.
• Customer Support Communications: Retained for three (3) years from the date of the final communication in each support case, for dispute resolution and quality assurance purposes.
• Technical & Device Logs: Retained for up to twelve (12) months from the date of collection, unless specific records are required for an ongoing security investigation.

After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Where anonymisation is not technically feasible, data is destroyed using industry-standard secure deletion methods.

The security of your personal data is a top priority at c7c7c7. We implement a comprehensive set of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure.

• Encryption in Transit: All data transmitted between your device and the c7c7c7 Platform is encrypted using 256-bit SSL/TLS encryption. You can verify this by checking for the padlock icon and "https://" prefix in your browser's address bar.
• Encryption at Rest: Sensitive personal data stored on our servers — including payment identifiers and identity verification records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data held by c7c7c7 is strictly limited to authorised personnel who require that access to perform their legitimate job functions. All internal access is subject to role-based permissions and is logged.
• Security Audits: Our Platform and infrastructure undergo regular third-party security assessments, vulnerability scanning, and penetration testing to identify and remediate potential weaknesses proactively.
• Incident Response: c7c7c7 maintains a documented data breach response procedure. In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant authorities without undue delay.
• Staff Training: All c7c7c7 personnel who handle personal data receive regular training on data protection principles and security best practices.

As a user of the c7c7c7 Platform and a data subject, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all legitimate requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data c7c7c7 holds about you, along with information about how that data is being processed. This is sometimes referred to as a Subject Access Request (SAR).
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to Erasure: In certain circumstances — for example, where your data is no longer necessary for the purpose for which it was collected — you may request that we delete your personal data. Note that we may be unable to fulfil erasure requests where retention is required by law (e.g., AML and financial record-keeping obligations).
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to our processing.
• Right to Data Portability: Where processing is carried out on the basis of your consent or contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where it is carried out on the basis of our legitimate interests, including profiling for responsible gaming monitoring purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

The c7c7c7 Platform is strictly intended for adults aged 18 and above. We do not knowingly collect personal data from any individual under the age of 18. If we become aware that personal data has been collected from a person under 18, we will take immediate steps to delete that data and close the associated account.

The c7c7c7 Platform may contain references to third-party game providers and payment service brands. While these providers operate within the c7c7c7 Platform under contractual agreements, any interaction you have directly with a third-party provider's own website or application is governed by that provider's own privacy policy, over which c7c7c7 has no control and for which c7c7c7 accepts no responsibility.

We encourage you to review the privacy policies of any third-party service providers you interact with directly, particularly your chosen payment method providers (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard), as their data handling practices may differ from those described in this Policy.

c7c7c7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made to this Policy, we will notify registered players by email and/or by displaying a prominent notice on the Platform prior to the changes taking effect.

The date at the top of this Policy reflects when it was last reviewed and updated. We encourage you to review this Policy periodically to stay informed about how we protect your personal data. Your continued use of the c7c7c7 Platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way c7c7c7 handles your personal data, please do not hesitate to contact our dedicated support team. We are available 24 hours a day, 7 days a week, including Bangladeshi public holidays, and aim to respond to all privacy-related enquiries within 24 hours Bangladesh Standard Time (BST, UTC+6).