b7b7 Privacy
Policy & Data Use

b7b7 collects personal data from players in Bangladesh in order to deliver a secure, personalised, and compliant gaming experience on b7b7.club. We collect only the data that is necessary for the purposes described in this Privacy Policy, and we do not collect sensitive data beyond what is required for identity verification and regulatory compliance.

Registration & Account Data:

• Full legal name, date of birth, and gender as provided at account registration.
• Email address and/or mobile phone number used to create your b7b7 account.
• Username and encrypted password credentials.
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postal code.

Identity Verification (KYC) Data:

• Copies of government-issued identity documents, such as a National Identity Card (NID), passport, or birth certificate, submitted for Know Your Customer (KYC) verification.
• Selfie or facial image submitted alongside identity documents where required for liveness verification.
• Proof of address documentation, such as a utility bill or bank statement, where requested.

Financial & Transaction Data:

• Payment method identifiers associated with bKash, Nagad, Rocket, Upay, or bank accounts used for deposits and withdrawals (we do not store full bank account numbers or mobile wallet PINs).
• Transaction history, including deposit amounts, withdrawal requests, and balances, all denominated in Bangladeshi Taka (BDT, ৳).
• Records of bonus claims, wagering activity, and promotional participation.

Technical & Usage Data:

• IP address, device type, browser type and version, and operating system.
• Cookies and session identifiers (see the Cookies & Tracking section for full details).
• Pages visited on b7b7.club, game sessions played, session duration, and click-path data.
• Geolocation data derived from IP address (not precise GPS location).

Communications Data:

• Records of messages exchanged with b7b7 support, including emails sent to [email protected] and any live chat transcripts.
• Responses to surveys, feedback forms, or promotional opt-in requests where you voluntarily provide them.

The table below summarises the main data categories, the legal basis for processing, and how long each category is retained:

b7b7 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. However, in order to operate the b7b7 platform and comply with our legal obligations, we share certain data with a limited number of trusted third-party service providers and authorities under strictly controlled conditions.

Categories of recipients with whom b7b7 may share your data:

• Game providers: Certified providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session data necessary to deliver their games to you via the b7b7 platform. These providers are contractually bound to handle this data securely and only for the purpose of game delivery.
• Payment processors: Providers of bKash, Nagad, Rocket, Upay, and partner banks (including BRAC Bank, City Bank, Dutch-Bangla Bank) receive the minimum transaction data required to process your deposits and withdrawals in BDT.
• Identity verification services: Third-party KYC and AML screening providers receive identity document data for the purpose of verifying your identity and screening against watchlists as required by compliance obligations.
• IT infrastructure providers: Cloud hosting, content delivery network, and security service providers who process data on our behalf under data processing agreements that prohibit any independent use of your data.
• Analytics providers: Aggregated, anonymised, or pseudonymised usage data may be shared with analytics providers to support platform improvement. No personally identifiable information is shared with analytics services in a form that could identify you.
• Legal authorities: b7b7 will disclose personal data to law enforcement, regulatory bodies, or courts where required by a valid legal obligation, court order, or lawful request. We will notify affected users of such disclosure requests where legally permitted to do so.

All third-party service providers engaged by b7b7 are required to implement appropriate technical and organisational security measures to protect your personal data, and are prohibited from using it for any purpose other than the specific service they provide to b7b7.

b7b7 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, and reporting requirements. Once data is no longer needed for any of these purposes, it is securely deleted or irreversibly anonymised.

The key retention periods applied by b7b7 are as follows:

• Active accounts: All account data, transaction records, and game history are retained for the full duration of your account being open on b7b7.club.
• Closed accounts: Following account closure (whether requested by you or actioned by b7b7), core account and transaction data is retained for a minimum of five (5) years to meet AML and regulatory compliance obligations.
• KYC documents: Identity verification documents are retained for five (5) years from the date of verification, or five (5) years from account closure, whichever is later.
• Financial transaction records: Records of all deposits and withdrawals in BDT are retained for a minimum of seven (7) years in line with standard financial record-keeping obligations.
• Support communications: Email and chat records are retained for three (3) years from the date of the last interaction in a given support case.
• Technical / log data: Server logs and session data are retained on a rolling 13-month basis before being deleted or fully anonymised.
• Marketing consent records: Records of your consent to receive marketing communications are retained for the duration of your account, plus one (1) year after account closure, to demonstrate compliance.

Where data is retained beyond the closure of your account purely for legal compliance purposes, it will be held in a restricted access environment accessible only to authorised compliance personnel. It will not be used for any operational or marketing purposes during this retention period.

b7b7 applies a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security programme is reviewed and updated regularly to address emerging threats.

Technical security measures in place at b7b7 include:

• SSL/TLS encryption: All data transmitted between your device and b7b7.club is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser address bar when visiting b7b7.club.
• Encrypted data storage: Sensitive data, including identity documents and payment method identifiers, is stored in encrypted form at rest using strong encryption standards.
• Access controls: Access to personal data within b7b7's internal systems is restricted on a need-to-know basis. Staff with access to player data are subject to confidentiality obligations and regular security training.
• Intrusion detection: b7b7's infrastructure is monitored continuously for suspicious access patterns, brute-force attempts, and anomalous behaviour.
• Two-factor authentication (2FA): b7b7 supports 2FA for player accounts. We strongly encourage all players to enable 2FA to add an additional layer of security to their account login.
• Vulnerability management: b7b7's platform undergoes regular security assessments, including penetration testing, to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no system connected to the internet can be guaranteed to be completely secure. b7b7 takes all reasonable steps to protect your data, but cannot provide an absolute assurance against all possible security threats. In the event of a data breach that is likely to result in a risk to your rights or interests, b7b7 will notify affected players without undue delay and will take immediate steps to contain the breach and mitigate its impact.

Players are also responsible for maintaining the security of their own accounts. You should use a strong, unique password for your b7b7 account, never share your credentials with anyone, and contact [email protected] immediately if you suspect unauthorised access to your account.