c7c7 Privacy Policy

This Privacy Policy describes how c7c7 (referred to herein as "c7c7", "we", "us", or "our"), the operator of the online casino and sports betting platform accessible at https://c7c7.onl (the "Platform"), collects, uses, stores, and protects the personal data of individuals who register for or use the Platform (referred to herein as "you", "your", or the "Player").

c7c7 is committed to handling all personal data in a responsible, transparent, and lawful manner. This Privacy Policy forms part of the binding agreement between you and c7c7 and should be read in conjunction with our Terms & Conditions. By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

This Policy applies to all data processing activities carried out by c7c7 in connection with the Platform, including the collection of data via the website at https://c7c7.onl, via customer support communications, and via our payment processing integrations with bKash, Nagad, Rocket, Upay, and partner Bangladeshi banks.

c7c7 collects the following categories of personal data from Players:

c7c7 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data beyond what is strictly necessary for identity verification purposes.

c7c7 collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal request, submitting a support ticket, or corresponding with our team by email.
• Automated technical collection: Data collected automatically as you use the Platform, including IP addresses, session logs, device fingerprints, and browser metadata, collected via server logs and first-party analytics tools.
• Payment processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and Bangladeshi banking partners when processing your deposits or withdrawals. c7c7 receives only the reference data needed to reconcile transactions — your full payment credentials are never transmitted to or stored by c7c7.
• Third-party game studios: Aggregated gameplay outcome data received from certified game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) to settle bets and compile account history. Game studios do not receive your identity or contact data from c7c7.
• Cookies and similar technologies: Data collected via first-party cookies as described in Section 8 of this Policy.

c7c7 uses the personal data it collects for the following purposes:

• Account creation and management: To register your account, verify your identity and age (21+ requirement), maintain your account balance, and manage your profile settings.
• Service delivery: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer; to settle sports bets and casino game rounds; to apply bonuses and promotional credits; and to provide access to all games and markets on the Platform.
• Security and fraud prevention: To detect, investigate, and prevent unauthorised access, fraudulent transactions, bonus abuse, multi-accounting, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Legal compliance: To meet applicable legal and regulatory obligations, including anti-money-laundering (AML) and know-your-customer (KYC) requirements, and to respond to lawful requests from competent authorities.
• Responsible gaming: To monitor gaming activity for indicators of problem gambling and to proactively offer or apply responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion where appropriate.
• Customer support: To respond to your enquiries, resolve disputes, and improve the quality of our support services.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the performance, stability, and user experience of the Platform.
• Communications: To send you account-related notifications (such as deposit confirmations, withdrawal status updates, and security alerts) and, where you have opted in, to send you promotional communications about bonuses and new games. You may withdraw consent to marketing communications at any time by contacting [email protected].

c7c7 processes your personal data under one or more of the following legal bases, depending on the purpose of the processing:

• Contractual necessity: Processing that is required to perform the contract between you and c7c7 — including account registration, bet settlement, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws — including AML record-keeping, KYC identity verification, and cooperation with lawful authority requests.
• Legitimate interests: Processing that serves c7c7's legitimate business interests, provided those interests are not overridden by your rights and interests — including fraud detection, platform security, and aggregated analytics for service improvement.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and for the use of non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing that took place before withdrawal.

c7c7 does not sell, rent, or trade your personal data. We share personal data only in the following limited and controlled circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank receive only the transaction reference data required to process your deposits and withdrawals. These providers are bound by their own data protection obligations and are not permitted to use your data for their own commercial purposes in connection with your c7c7 account.
• Identity verification partners: Where automated KYC verification is used, your identity documents may be processed by a certified third-party verification provider operating under a strict data processing agreement with c7c7.
• Game studio providers: Aggregated bet and game result data is exchanged with licensed game studios for the purpose of settling rounds. Studios do not receive your name, contact details, or financial information.
• Legal and regulatory authorities: c7c7 will disclose personal data to competent authorities, law enforcement agencies, or courts when required to do so by applicable law, court order, or binding regulatory instruction. Where legally permissible, c7c7 will notify affected Players before such disclosure occurs.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of c7c7's assets, personal data held by c7c7 may be transferred to the acquiring entity, subject to equivalent data protection commitments. Affected Players will be notified in advance of such a transfer.

c7c7 treats payment data with the highest level of care. The following specific protections apply to financial data:

• c7c7 never stores your bKash PIN, Nagad PIN, Rocket PIN, Upay PIN, or online banking password at any point in the transaction process.
• All payment transactions are routed through accredited third-party payment gateways. c7c7's servers receive only a transaction confirmation token and reference number, not your full payment credentials.
• Bank account details (account number and account name) submitted for withdrawal verification are stored in encrypted form and accessed only by authorised members of the c7c7 finance team for the purpose of processing your withdrawal request.
• Transaction records are retained for a minimum of five (5) years from the date of the transaction to comply with AML record-keeping requirements, after which they are securely deleted.
• All deposits and withdrawals on the c7c7 Platform are denominated in Bangladeshi Taka (BDT, ৳). c7c7 does not process transactions in foreign currencies.

c7c7 uses first-party cookies — small text files stored on your device — to operate and improve the Platform. We do not use third-party advertising cookies or cross-site tracking technologies.

The cookies used by c7c7 fall into the following categories:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during a session, security tokens, and cookies that remember your account preferences. These cookies cannot be disabled without breaking core Platform functionality.
• Functional cookies: Store your preferences such as language settings, notification preferences, and display configuration. Disabling these cookies may result in a reduced experience.
• Analytics cookies: Collect anonymised data about how Players navigate the Platform — pages visited, session duration, and features used — to help us improve performance and usability. These cookies are activated only where you have provided consent.

You may manage your cookie preferences through your browser settings at any time. Blocking strictly necessary cookies will prevent you from logging into your account. Blocking analytics cookies will have no effect on your ability to use the Platform.

c7c7 retains personal data for the periods specified below, after which data is securely deleted or irreversibly anonymised:

• Active account data: Retained for the full duration of your account plus five (5) years following account closure, to meet AML and KYC legal retention obligations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction.
• Identity verification documents: Retained for the duration of the account plus five (5) years post-closure. Documents are stored in encrypted form with restricted access.
• Support communications: Retained for three (3) years from the date of the last interaction, to support dispute resolution and quality assurance.
• Marketing consent records: Retained until consent is withdrawn, plus a further one (1) year as a record of the withdrawal.
• Technical and session logs: Retained for ninety (90) days for security monitoring purposes, then automatically purged.

As a Player whose personal data is processed by c7c7, you have the following rights, which you may exercise at any time by submitting a written request to [email protected]:

• Right of access: You may request a copy of all personal data c7c7 holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification: You may request correction of any personal data that is inaccurate or incomplete. Some corrections (such as a name change) may require supporting documentation.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to c7c7's legal retention obligations. Erasure requests may be declined where retention is required by AML law or to resolve an open dispute.
• Right to object: You may object to processing of your data for legitimate interests or for direct marketing purposes. Upon a valid objection to marketing, c7c7 will cease all marketing communications within five (5) business days.
• Right to restrict processing: In certain circumstances (for example, where you contest the accuracy of data or where processing is unlawful but you prefer restriction over deletion), you may request that c7c7 restrict processing of your data to storage only.
• Right to data portability: You may request your account data in a structured, commonly used, and machine-readable format (JSON or CSV) for transfer to another service provider.
• Right to withdraw consent: Where processing is based on consent (such as marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

c7c7 will respond to all privacy rights requests within thirty (30) calendar days of receipt. Where a request is complex or involves a high volume of data, this period may be extended by a further sixty (60) days with prior notice to you. There is no charge for submitting a privacy rights request.

c7c7 is strictly a 21+ platform. We do not knowingly collect personal data from any person under the age of 21. If c7c7 becomes aware that personal data has been collected from an individual under the age of 21, that data will be immediately and securely deleted and the associated account will be closed. Any funds deposited by an underage player will be returned to the originating payment method after identity verification.

If you believe that a person under the age of 21 has registered an account on the c7c7 Platform, please notify us immediately at [email protected]. We take underage gambling extremely seriously and will act on all such reports without delay.

c7c7 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and c7c7 servers.
• Encryption at rest for all sensitive data fields, including identity documents, financial account references, and encrypted passwords using bcrypt hashing.
• Role-based access controls (RBAC) ensuring that c7c7 staff can access only the minimum data necessary to perform their specific job functions.
• Automated intrusion detection and prevention systems monitoring network traffic for anomalous activity in real time.
• Regular independent security audits and penetration testing of the Platform infrastructure.
• Mandatory two-factor authentication for all c7c7 staff accounts with access to Player data.
• Secure off-site data backup with tested recovery procedures to ensure business continuity in the event of a system failure.

In the event of a personal data breach that poses a risk to your rights and freedoms, c7c7 will notify affected Players by email within seventy-two (72) hours of becoming aware of the breach, setting out the nature of the breach, the data involved, and the steps taken to address it.

Games on the c7c7 Platform are supplied by certified third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game, the game client (running in your browser) communicates with the studio's servers to generate game outcomes via certified RNG systems.

In the course of this communication, the game studio's servers may receive your c7c7 account identifier and relevant game session data. Game studios are contractually prohibited from using this data for any purpose other than delivering the game service to c7c7. They are not provided with your name, contact details, or payment information.

c7c7 is not responsible for the data practices of third-party game studios beyond the contractual data processing agreements in place with each studio. Players seeking information about a specific studio's data practices should consult that studio's published privacy documentation.

c7c7 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. When a material change is made, c7c7 will notify registered Players via email to the address on file at least seven (7) days before the change takes effect. The updated Policy will also be published on this page with a revised effective date.

Your continued use of the Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a material change, you should request account closure before the change takes effect by contacting [email protected].

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or wish to raise a complaint about c7c7's data practices, please contact our Data Protection team using the details below. Our support team operates twenty-four hours a day, seven days a week, including Bangladeshi public holidays and Eid.

• Email: [email protected] (plain text — not a clickable link)
• Response time: Within 30 calendar days for privacy rights requests; within 5 business days for general privacy enquiries.
• Hours: 24/7 (BST, UTC+6), including Eid and public holidays.
• Service region: All divisions of Bangladesh — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh.

c7c7 is committed to resolving all privacy complaints fairly and promptly. If you are not satisfied with the outcome of your complaint after contacting our team, you may have the right to escalate the matter to a relevant supervisory authority or consumer protection body under applicable Bangladeshi law.