bd7u Privacy Policy — How We Handle Your Personal Data

1 Who We Are

bd7u is an online casino and sports betting platform operating at https://bd7u.io, designed specifically for the Bangladesh market. We offer cricket betting, live casino games, slots, crash games, virtual sports, and a full range of interactive gaming services to registered Members aged 21 and above.

In this Privacy Policy, references to "bd7u", "we", "us", and "our" refer to the operator of the bd7u platform. References to "you", "your", and "Member" refer to any individual who registers an Account with bd7u or who accesses the Platform in any capacity, including as a visitor.

For all privacy-related enquiries, our designated point of contact is our support team, reachable at [email protected]. All communications regarding data privacy should clearly reference "Privacy Request" in the subject line so that your query is directed to the appropriate team promptly.

2 Scope of This Policy

This Privacy Policy applies to all personal data processed by bd7u in connection with your use of the bd7u Platform, including the website at https://bd7u.io, any associated mobile-optimised interfaces, and all Services made available through those channels.

This policy covers data collected from:

• Registered Members who hold an active Account on bd7u.
• Visitors who browse the bd7u website without creating an Account.
• Individuals who contact bd7u via email or other support channels without necessarily holding an Account.
• Former Members whose Accounts have been closed but whose data is retained in accordance with the retention schedules set out in Section 9.

3 Data We Collect

bd7u collects only the personal data that is necessary for the purposes described in this policy. The following table summarises the categories of data we collect and provides examples of specific data points within each category:

4 How We Collect Data

bd7u collects personal data through the following channels:

4.1 Direct Collection

Data you provide directly when you register an Account, complete the KYC verification process, make a deposit or withdrawal, contact our support team, respond to a promotional survey, or update your Account profile. This is the primary source of identity and contact data.

4.2 Automated Collection

Technical and usage data collected automatically when you access the bd7u Platform through standard web technologies including server logs, session cookies, and analytics tools. This data is collected passively and does not require any action on your part beyond visiting the website.

4.3 Third-Party Sources

In limited circumstances, bd7u may receive data about you from third-party identity verification providers (for KYC purposes), payment processing partners (such as bKash, Nagad, and Rocket), and fraud detection services. Data received from these sources is used only for the specific purpose for which it was obtained and is handled with the same level of care as directly collected data.

5 How We Use Your Data

bd7u uses the personal data we collect for the following specific purposes, each of which is tied to a lawful basis as described in Section 6:

• Account Creation and Management: To register your Account, verify your identity, and maintain the accuracy and security of your Account throughout your membership.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and Visa/Mastercard, and to maintain a complete transaction record in Bangladeshi Taka.
• Service Delivery: To provide access to casino games, live dealer tables, sports betting markets (including BPL, Bangladesh Tigers, T20, IPL, and football), crash games, and virtual sports.
• Responsible Gaming Compliance: To monitor gaming activity for signs of problem gambling behaviour, enforce deposit limits and self-exclusion requests, and maintain the 21+ age restriction that bd7u enforces without exception.
• Legal and Regulatory Compliance: To meet our obligations under applicable anti-money laundering requirements, KYC obligations, fraud prevention requirements, and any other relevant legal or regulatory duty.
• Customer Support: To respond to your enquiries, resolve disputes, investigate complaints, and provide assistance with Account issues.
• Security and Fraud Prevention: To detect and prevent unauthorised account access, fraudulent transactions, multi-accounting, bonus abuse, and other prohibited conduct described in our Terms & Conditions.
• Platform Improvement: To analyse usage patterns, identify technical issues, and improve the features, performance, and user experience of the bd7u Platform.
• Marketing Communications: To send promotional offers, bonus notifications, and seasonal campaign communications (such as Eid promotions and BPL season offers) to Members who have opted in to receive such communications.

6 Legal Basis for Processing

All personal data processing activities conducted by bd7u are grounded in one or more of the following recognised lawful bases:

• Contract Performance: Processing necessary to fulfil our contractual obligations to you as a registered Member, including Account management, payment processing, and service delivery.
• Legal Obligation: Processing required for compliance with applicable laws, including KYC/AML obligations, responsible gaming regulations, and any direction from a competent authority.
• Legitimate Interests: Processing carried out on the basis of bd7u's legitimate business interests — such as fraud prevention, platform security, and analytics — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing activities for which we have obtained your explicit, informed, and freely given consent — principally marketing communications. You may withdraw consent at any time without prejudice to any prior processing carried out on that basis.

7 Sharing Your Data

bd7u does not sell your personal data. We share data only in the limited circumstances described below, and only to the extent strictly necessary for the relevant purpose:

7.1 Payment Partners

Financial data necessary to process deposits and withdrawals is shared with our payment processing partners — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard. These partners operate under their own privacy policies and are responsible for the data they process independently of bd7u.

7.2 Identity Verification Providers

Identity documents and personal information submitted for KYC purposes may be shared with third-party identity verification and document authentication services. These providers process data solely for the purpose of verifying your identity and are contractually bound to handle your data securely.

7.3 Game Content Providers

Technical session data (such as player session tokens and stake amounts) is transmitted to game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to enable real-time game sessions. These studios do not receive your full identity profile and process session data only for the purpose of rendering the game.

7.4 Legal Authorities

bd7u may be required to disclose personal data to law enforcement agencies, regulatory bodies, or courts when obligated to do so by applicable law, a valid legal order, or a government request. bd7u will, where permitted by law, notify affected Members of any such disclosure.

7.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of bd7u's business assets, Member data may be transferred to the acquiring entity as part of that transaction. bd7u will provide reasonable notice of any such transfer and ensure that the acquiring entity agrees to honour the commitments set out in this Privacy Policy.

8 Cookies & Tracking Technologies

bd7u uses cookies and similar tracking technologies to operate the Platform efficiently and to improve the user experience. The following types of cookies are in use:

• Essential Cookies: Required for the Platform to function correctly. These include session authentication cookies that keep you logged in, security tokens, and cookies that remember your language and regional preferences. These cookies cannot be disabled without impairing your use of the Platform.
• Analytics Cookies: Used to collect aggregated, anonymised data about how Members navigate the Platform, which pages are most visited, and where technical errors occur. This data helps bd7u improve platform performance and content relevance. No personally identifiable information is included in analytics data.
• Functional Cookies: Used to remember your preferences — such as display settings, recently played games, and notification preferences — so that your experience is consistent across sessions.
• Marketing Cookies: Used to measure the effectiveness of bd7u's promotional campaigns and, where consent has been given, to deliver personalised promotional content. These cookies are only active if you have opted in to marketing communications.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will affect the functionality of the Platform. bd7u does not respond to browser "Do Not Track" signals at this time, but we are committed to minimising tracking to what is operationally necessary.

9 Data Retention

bd7u retains personal data only for as long as is necessary to fulfil the purpose for which it was collected or to comply with applicable legal obligations. The following retention periods apply as general guidance:

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Data that has been anonymised may be retained indefinitely for aggregated statistical analysis.

10 Data Security

bd7u applies a multi-layered approach to data security to protect Member information against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• SSL/TLS Encryption: All data in transit between your device and bd7u's servers is encrypted using industry-standard SSL/TLS protocols. You can verify this by the padlock symbol in your browser's address bar when visiting https://bd7u.io.
• Encrypted Storage: Sensitive data fields — including financial data and identity documents — are encrypted at rest using strong encryption algorithms. Plain-text storage of sensitive personal data is not permitted under bd7u's internal data security standards.
• Access Controls: Access to Member personal data is restricted to authorised personnel who require it to perform specific, documented job functions. Role-based access controls and audit logging are enforced across all internal systems that process personal data.
• Intrusion Detection: bd7u employs real-time intrusion detection and monitoring systems to identify and respond to suspicious activity on our infrastructure. Security events are reviewed by our technical team on an ongoing basis.
• Vendor Security Standards: Third-party service providers who process Member data on bd7u's behalf are required to meet equivalent security standards as a condition of their engagement. We conduct due diligence on key vendors prior to engagement and review their security posture periodically.

11 Your Privacy Rights

As a Member of bd7u, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Privacy Request":

• Right of Access: You may request a copy of all personal data that bd7u holds about you. We will provide a structured summary of your data within 30 days of receiving a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. For basic Account details (such as mobile number or email address), you may also make updates directly through your Account profile.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where the data has been unlawfully processed. Erasure requests are subject to our legal retention obligations — data we are required to retain by law cannot be deleted ahead of the applicable retention period.
• Right to Restrict Processing: You may request that bd7u restricts the processing of your data in certain circumstances, for example while a rectification request is being assessed or while you contest the lawfulness of processing.
• Right to Object: You have the right to object to processing based on legitimate interests, and to processing for direct marketing purposes. Objecting to marketing communications will result in your removal from all marketing lists immediately.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you may request a machine-readable copy of the personal data you provided to bd7u, which you may then transfer to another service provider.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

bd7u will respond to all verified privacy rights requests within 30 days. For complex requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.

12 Children & Minors

bd7u's Services are strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Our registration process requires confirmation of age, and we conduct KYC checks to verify this where necessary.

If bd7u becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated Account without delay. Any winnings accumulated by an underage Member are not payable and will be forfeited.

13 Third-Party Links

The bd7u Platform may contain references to third-party content providers, payment services (such as bKash, Nagad, and Rocket), and game studios (such as Pragmatic Play, Evolution Gaming, and Spribe). These third parties operate independently of bd7u and maintain their own privacy policies.

bd7u is not responsible for the privacy practices of any third party, and this Privacy Policy does not extend to any data processed by third parties through their own interfaces or platforms. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of bd7u.

14 Changes to This Policy

bd7u reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify Members by posting a prominent notice on the bd7u Platform and, where possible, by sending an email notification to the address registered on your Account.

The revised policy will take effect on the date indicated at the top of the document. Continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not accept the changes, you should cease using the Platform and contact us to close your Account.

We recommend reviewing this page periodically to stay informed of how bd7u protects and manages your personal data. The most current version of this policy is always available at https://bd7u.io/privacy-policy.

15 Contact & Data Requests

For any questions about this Privacy Policy, to exercise your privacy rights, or to submit a formal data-related complaint, please contact bd7u using the details below. All contact information is provided as plain text — please do not send sensitive documents to general support channels unless instructed to do so.

• Privacy Support Email: [email protected] (plain text — not a clickable link)
• Subject Line for Privacy Requests: "Privacy Request" — please include this to ensure prompt routing
• Platform URL: https://bd7u.io
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response Time: Acknowledgement within 2 business days; full response within 30 days