c7bd Privacy
Policy

c7bd is Bangladesh's premier online betting and casino platform, providing sports betting, live casino games, slots, and crash games to adult players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and throughout Bangladesh.

We are committed to protecting the privacy and security of every individual who interacts with the c7bd Platform. This Policy has been written in plain English to ensure that our players in Bangladesh fully understand how their data is handled — from the moment they register an account to the point at which their data is securely deleted or archived.

This Policy applies to all personal data processed by c7bd in connection with the Platform, including data collected via the website at c7bd.io, via communications with our support team, and via payment transactions processed through bKash, Nagad, Rocket, Upay, and other supported payment methods.

If you have any questions about how c7bd handles your personal data, please contact our Data Protection team using the details provided in Section 16 of this Policy.

For the purposes of this Privacy Policy, the data controller responsible for your personal data is c7bd, operating the Platform at c7bd.io. References to "c7bd", "we", "us", and "our" throughout this Policy refer to the Platform operator and its authorised personnel.

As data controller, c7bd determines the purposes for which and the means by which your personal data is processed. Where c7bd engages third-party service providers (such as payment processors, game studios, or identity verification services) to process data on its behalf, those providers act as data processors and are bound by written data-processing agreements that restrict their use of your data to the specific purposes for which it was shared.

c7bd collects personal data in several categories depending on your level of engagement with the Platform. The table below summarises the types of data we collect and the context in which each type is gathered.

c7bd does not intentionally collect special category data (such as health, political opinions, or religious beliefs) unless it is volunteered by the player in a support communication context and is directly relevant to a responsible gaming request (for example, a medical certificate supporting a self-exclusion application).

c7bd collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal request, update your profile, contact our support team, or submit a bonus claim or complaint.
• Automatically through platform use: When you visit or interact with c7bd.io, our systems automatically collect device information, IP address, browser details, session duration, and usage patterns via server logs and analytics tools.
• Through cookies and tracking technologies: c7bd uses cookies, pixel tags, and similar technologies to remember your preferences, maintain your login session, analyse Platform performance, and deliver relevant promotional content to opted-in users. See Section 8 for full details of our cookie practices.
• From payment providers: When you transact via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, our payment processing partners share transaction confirmation data with c7bd to update your account balance and maintain financial records.
• From identity verification partners: Where c7bd uses a third-party KYC or identity verification service, that provider may return a verification status and document match score to c7bd. The underlying document images are handled in accordance with the provider's own security protocols.
• From fraud prevention and AML screening services: c7bd may cross-reference your registration details against third-party databases to screen for sanctions, politically exposed persons (PEP) status, or known fraud indicators.

c7bd uses the personal data it collects for the following purposes:

• Account creation and management: To register your account, verify your identity, maintain your account settings, and provide you with access to the full range of c7bd Platform features.
• Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, and card payment; to maintain accurate financial records; and to comply with payment provider requirements.
• Identity verification and KYC compliance: To verify that you meet the 21+ age requirement and to comply with anti-money laundering (AML) obligations, including source-of-funds checks where required.
• Platform delivery and improvement: To deliver the betting and gaming services you have requested; to monitor Platform performance and availability; and to identify and fix bugs, errors, and technical issues.
• Security and fraud prevention: To detect and prevent unauthorised account access, fraudulent transactions, bonus abuse, match-fixing activity, and other forms of dishonest conduct that breach our Terms & Conditions.
• Responsible gaming: To monitor gameplay patterns for signs of problem gambling behaviour; to implement deposit limits, loss limits, session timers, and self-exclusion requests; and to comply with responsible gaming obligations.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide 24/7 English-language support via live chat and email.
• Legal and regulatory compliance: To comply with applicable laws, respond to lawful requests from regulatory and law enforcement authorities, and maintain records as required by financial and gaming regulations.
• Marketing and promotions (with consent): To send you promotional offers, bonus notifications, tournament announcements (including BPL season promotions), and platform updates — but only where you have opted in to receive such communications.
• Analytics and personalisation: To understand how players use the Platform, improve the user experience, and tailor game recommendations and promotional content to your demonstrated preferences — in aggregate and, where consented, at an individual level.

c7bd processes your personal data on the following legal bases, depending on the purpose of processing:

c7bd does not sell, rent, or trade your personal data. We share data only in the following circumstances and only to the extent strictly necessary for each purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, City Bank, and other supported payment partners receive the transaction data required to process your deposit or withdrawal. These providers are governed by their own privacy policies and security standards.
• Game providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier to facilitate game launches and record gameplay outcomes. They do not receive your full name, payment details, or NID data.
• Identity verification services: A specialised third-party KYC provider may receive your NID image or passport scan to perform automated document and biometric verification. That provider is engaged under a strict data-processing agreement and is not permitted to use your data for any other purpose.
• Fraud prevention and AML screening services: Aggregated or pseudonymised account data may be shared with fraud and AML screening platforms to detect suspicious activity, match against sanctions lists, and identify PEP status.
• Regulatory and law enforcement authorities: c7bd will disclose personal data to competent authorities where required by law, court order, or regulatory mandate. This includes cooperation with financial intelligence units and law enforcement agencies investigating money laundering, fraud, or other financial crimes.
• Professional advisers: Lawyers, auditors, accountants, and insurers engaged by c7bd may access limited personal data in the course of providing professional services, subject to professional confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or a substantial part of c7bd's business, personal data held by c7bd may be transferred to the acquiring entity as part of that transaction. Affected players will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

c7bd uses cookies and similar technologies (including pixel tags and local storage objects) to operate the Platform effectively, remember your preferences, maintain your login session, and understand how players engage with the site.

The categories of cookies used on c7bd.io are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable you to log in, navigate between pages, maintain your session state, and use features such as the bet slip and cashier. These cookies cannot be disabled without preventing core Platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised information about how visitors use the Platform — including which pages are visited most frequently and how long players spend on particular game categories. This data helps us improve the Platform experience for all players in Bangladesh.
• Functionality Cookies: These cookies remember your preferences — such as your preferred language setting (English), display preferences, and notification settings — so you do not need to re-enter them on each visit.
• Marketing & Targeting Cookies: With your consent, these cookies track your engagement with promotional content and game categories to enable us to deliver relevant offers — for example, BPL cricket betting promotions during the tournament season, or Eid bonus notifications. You can withdraw this consent at any time.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the c7bd Platform. Disabling analytics or marketing cookies will not affect your ability to place bets or play games.

c7bd retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve disputes or enforce our Terms & Conditions. The following retention periods apply:

On expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data has been anonymised, the resulting aggregate information is no longer personal data and may be retained indefinitely for analytical purposes.

As a registered c7bd account holder, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at support@c7bd.io and identify your request as a data rights enquiry. We will respond within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data c7bd holds about you, along with information about how it is used, where it is stored, and with whom it has been shared. This is commonly referred to as a Subject Access Request (SAR).
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain profile details directly through your account settings.
• Right to Erasure: In certain circumstances — for example, where data is no longer necessary for the purpose for which it was collected and no overriding legal obligation requires its retention — you may request that your personal data be deleted. Note that AML, KYC, and financial record-keeping obligations may prevent immediate erasure of certain data categories.
• Right to Restrict Processing: You may request that c7bd restrict the processing of your personal data in specific circumstances, such as while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive a structured, commonly used, machine-readable copy of the personal data you have provided to c7bd.
• Right to Object: You have the right to object to processing based on c7bd's legitimate interests at any time. You also have an unconditional right to object to processing of your personal data for direct marketing purposes — including profiling related to marketing — at any time and without providing a reason.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal. You can withdraw marketing consent via your account settings or by contacting support.
• Right Not to Be Subject to Automated Decision-Making: c7bd does not make decisions with legal or similarly significant effects based solely on automated processing of your personal data without human review. Where automated tools are used in fraud detection or responsible gaming monitoring, a c7bd compliance officer will review any action that materially affects your account before it is implemented.

c7bd takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect your information from unauthorised access, disclosure, alteration, loss, or destruction. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and the c7bd Platform is encrypted using Transport Layer Security (TLS) with 256-bit encryption. This applies to all connections including login sessions, deposits, withdrawals, and support communications.
• Password Security: Account passwords are never stored in plain text. c7bd uses industry-standard one-way cryptographic hashing with salting to store password credentials, ensuring that even in the unlikely event of a data breach, raw passwords cannot be recovered.
• Two-Factor Authentication (2FA): c7bd strongly encourages all account holders to enable two-factor authentication on their accounts for an additional layer of login security. 2FA options are available via SMS to your registered Bangladeshi mobile number.
• Access Controls: Access to personal data within c7bd's systems is restricted on a strict need-to-know basis. All internal access events are logged and monitored. Staff with access to personal data undergo regular security training and are bound by confidentiality obligations.
• Server Security: Personal data is stored on secured servers equipped with firewalls, intrusion detection systems, and regular vulnerability scanning. Physical access to server infrastructure is restricted and monitored.
• Regular Security Audits: c7bd conducts regular internal security assessments and engages independent specialists to perform penetration testing and security audits of the Platform infrastructure.
• Incident Response: c7bd maintains a documented data breach response plan. In the event of a security incident that is likely to result in a risk to your rights and freedoms, we will notify affected account holders without undue delay and will take immediate steps to contain, assess, and remediate the incident.

While c7bd implements robust technical and organisational security measures, no system connected to the internet can be guaranteed to be completely secure. You also have an important role to play in protecting your account: keep your password confidential, do not share your login credentials with anyone, enable 2FA, and contact our support team immediately if you suspect unauthorised access to your c7bd account.

The c7bd Platform is strictly intended for adults aged 21 years and above. c7bd does not knowingly collect personal data from any individual under the age of 21. Our registration process includes mandatory date-of-birth verification, and KYC procedures are applied to confirm the age of all account holders.

If c7bd becomes aware that personal data has been collected from an individual who is under the age of 21, we will take immediate steps to:

• Suspend and permanently close the underage account;
• Reverse any deposits made and block any pending withdrawals pending further investigation;
• Securely delete all personal data associated with the underage account, to the extent permitted by law;
• Report the incident to our compliance team and, where required, to relevant authorities.

We strongly encourage parents and guardians in Bangladesh to use parental control software and to maintain open conversations with young people about the risks of online gambling. For further guidance on protecting minors from gambling-related harm, please visit our Responsible Gaming page.

The c7bd Platform may contain references to third-party game providers, payment services, or technology partners. While c7bd takes care to partner only with reputable, security-conscious organisations, we have no control over the content, privacy practices, or data handling of third-party websites or services that operate independently of the c7bd Platform.

This Privacy Policy applies exclusively to personal data collected and processed by c7bd in connection with the Platform at c7bd.io. c7bd accepts no responsibility or liability for the privacy practices of any third-party provider. We encourage you to review the privacy policies of any third-party service you interact with — including payment providers such as bKash, Nagad, and Rocket — to understand how they handle your personal data.

c7bd's Platform serves players based primarily in Bangladesh. In certain operational contexts — for example, where a third-party KYC provider, game studio, or cloud infrastructure partner operates servers located outside Bangladesh — your personal data may be transferred to and processed in jurisdictions other than Bangladesh.

Where such international transfers occur, c7bd takes the following steps to ensure that your data continues to be protected to a standard consistent with this Privacy Policy:

• Transfers are made only to countries or organisations that provide an adequate level of data protection, or are subject to appropriate contractual safeguards (such as standard data protection contractual clauses);
• All data processors engaged by c7bd for international processing are bound by written data-processing agreements that mandate compliance with applicable data protection standards;
• c7bd conducts due diligence on all international data processors before engagement and reviews those arrangements on a periodic basis.

If you would like further information about the specific safeguards applied to international data transfers affecting your personal data, please contact our support team at support@c7bd.io.

c7bd reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, new legal or regulatory obligations, or improvements to our Platform. The most current version of the Policy is always available at c7bd.io/privacy-policy. The effective date displayed at the top of the document will be updated each time a material revision is made.

Where changes are material — for example, a significant change to the categories of data we collect, the parties with whom we share data, or your rights as a data subject — c7bd will make reasonable efforts to notify active account holders via email or in-platform notification at least 7 days before the revised Policy takes effect.

Your continued use of the c7bd Platform after the effective date of any updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with the changes, you may close your account by contacting our support team. Your data will be handled in accordance with the retention obligations set out in Section 9 following account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or to c7bd's data processing practices, please contact us using the details below. Our support team is available 24 hours a day, 7 days a week, including Bangladesh public holidays, Eid, Pohela Boishakh, and Victory Day.

Email: support@c7bd.io

Subject Line: Please include "Privacy Enquiry" or "Data Rights Request" in your subject line to ensure your message is directed to the appropriate team member without delay.

Response Time: Privacy and data rights enquiries are typically acknowledged within 24 hours and resolved within 30 calendar days, with complex cases taking up to 60 days with prior notification.

If you are not satisfied with the outcome of your enquiry or believe that c7bd has failed to handle your personal data in accordance with this Policy or applicable data protection law, you have the right to escalate your complaint. Please follow these steps:

1. First Contact: Submit your complaint to support@c7bd.io with a full description of your concern. c7bd's compliance team will investigate and provide a written response.
2. Escalation: If you are not satisfied with the initial response, request a secondary review. A senior compliance officer will conduct an independent review and provide a final decision within 14 working days.
3. External Resolution: If internal resolution is not achieved to your satisfaction, you retain the right to seek external mediation or to raise the matter with a competent data protection authority or court of appropriate jurisdiction.