Privacy Policy — How fd7 Protects Your Data

1. Information We Collect

When you register an account on fd7, use our sportsbook, casino, or fishing game products, make a deposit or withdrawal, or contact our customer support team, we collect certain categories of personal information about you. This section explains the types of data we collect and the circumstances in which we collect them.

We collect personal data through the following channels: directly from you when you complete our registration form or update your account profile; automatically through cookies and similar technologies when you browse the fd7 Platform; from third-party payment processors such as bKash, Nagad, and Rocket when you initiate a deposit or withdrawal; and from identity verification service providers during the KYC process.

fd7 does not collect special categories of sensitive personal data such as racial or ethnic origin, religious beliefs, health information, or biometric data except where explicitly required by applicable law or where you have provided such information voluntarily (for example, if you disclose a gambling-related health concern when requesting self-exclusion under our Responsible Gaming programme).

2. How We Use Your Data

fd7 processes your personal data on the basis of one or more of the following lawful grounds: performance of a contract with you (operating your account and fulfilling your bets and transactions); compliance with a legal obligation (KYC, anti-money laundering, responsible gaming requirements); our legitimate interests (platform security, fraud prevention, service improvement); or your explicit consent (marketing communications).

The specific purposes for which fd7 uses your personal data include:

• Account management: Creating and maintaining your fd7 player account, verifying your identity, and managing your login credentials and account preferences.
• Transaction processing: Executing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banks; reconciling your account balance; and maintaining transaction records for audit purposes.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, money laundering, and other prohibited conduct on the Platform. This includes automated monitoring of account and betting patterns.
• Responsible gaming compliance: Monitoring account activity for indicators of problem gambling behaviour; applying self-exclusion and deposit limit settings; and fulfilling obligations under responsible gaming standards.
• Customer support: Responding to your queries, complaints, and requests submitted via live chat, email, or other support channels.
• Legal and regulatory compliance: Retaining transaction records and identity documents as required by applicable anti-money laundering standards and financial record-keeping obligations.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with the fd7 Platform, identify technical issues, and improve the user experience for Bangladesh players.
• Marketing communications: Sending you promotional offers, bonus notifications, and seasonal campaign messages — but only where you have provided explicit consent to receive such communications. You may withdraw consent at any time.

fd7 does not use your personal data for automated decision-making that produces significant legal effects on you without human review, except where required by applicable fraud prevention or anti-money laundering obligations, in which case you have the right to request human review of any automated decision affecting your account.

3. Data Sharing & Third Parties

fd7 does not sell, rent, or share your personal data with third parties for their own independent marketing or commercial purposes. We share your data only in the limited circumstances described in this section, and only to the extent necessary for the stated purpose.

Categories of third parties with whom fd7 may share your personal data include:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and other payment partners receive the transactional data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are independently responsible for their data processing activities.
• Identity verification providers: Third-party KYC service providers receive your identity documents and personal details for the purpose of verifying your identity as required under our responsible gaming and anti-fraud obligations.
• Game studio providers: Where you play games provided by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — certain technical session data (such as player ID and session token) is shared with those providers to facilitate gameplay. These providers do not receive your full identity or financial data.
• Technology and infrastructure providers: Cloud hosting, cybersecurity, and analytics service providers who process data on our behalf under strict data processing agreements that prohibit them from using your data for any purpose other than providing services to fd7.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory requirement, fd7 may disclose your personal data to law enforcement agencies, financial intelligence units, or other public authorities. fd7 will notify you of any such disclosure where legally permitted to do so.

All third-party service providers that process personal data on behalf of fd7 are required to implement appropriate technical and organisational security measures consistent with the sensitivity of the data they handle. fd7 conducts due diligence on key data processors before engaging their services and reviews those arrangements periodically.

4. Cookies & Tracking Technologies

fd7 uses cookies and similar tracking technologies on our Platform to ensure correct functionality, maintain your login session, understand how users navigate the site, and — where you have consented — to deliver personalised content and measure the effectiveness of our promotional campaigns.

The following categories of cookies are used on the fd7 Platform:

Strictly necessary cookies are required for the Platform to function and cannot be disabled without significantly impairing your ability to use your account. All other cookie categories are activated only with your explicit consent, which you may provide or withdraw by updating your cookie preferences in your account settings.

fd7 does not use third-party advertising networks or cross-site tracking pixels that share your browsing behaviour with companies unrelated to the fd7 Platform. Analytics data collected via cookies is processed in aggregate form and is not used to build individual user profiles for commercial sale.

5. Data Security & Retention

fd7 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and fd7 servers.
• Encryption at rest for sensitive data including identity documents, financial account details, and account passwords (stored as salted hashes — never in plaintext).
• Role-based access controls that limit which fd7 staff members can access personal data, on a strict need-to-know basis.
• Regular security assessments and vulnerability testing of the Platform and supporting infrastructure.
• Secure deletion procedures for data that has reached the end of its retention period.
• 24/7 monitoring of platform infrastructure for anomalous activity indicative of a security incident.

In the event of a data security incident that poses a risk to your personal data, fd7 will take immediate steps to contain the incident and will notify affected players within a reasonable timeframe, providing details of the nature of the breach and the steps being taken in response.

Data Retention: fd7 retains different categories of personal data for different periods, as set out below:

• Account and identity data: Retained for the duration of your account and for a minimum of five years following account closure, consistent with anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of the transaction.
• Customer support records: Retained for up to two years from the date of the interaction.
• Marketing preference records: Retained for the duration of your account and for six months following any opt-out request, to maintain a record of your preferences.
• Technical and analytics data: Aggregated analytics data retained for up to 24 months; server log data retained for up to 12 months.

Upon expiry of the applicable retention period, fd7 will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual. Where data cannot be immediately deleted due to backup cycle constraints, it will be isolated from further processing until deletion is complete.

6. Your Privacy Rights

As a player on the fd7 Platform, you hold a set of rights with respect to your personal data. fd7 is committed to honouring these rights in a timely and transparent manner. Your rights include:

• Right of access: You may request a copy of the personal data that fd7 holds about you. We will provide this in a structured, commonly used format within a reasonable period of receiving your request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain details directly through your account profile; for others, contact our support team.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. Note that this right is subject to overriding legal obligations such as anti-money laundering record-keeping requirements, which may require us to retain certain data regardless.
• Right to restrict processing: In certain circumstances, you may request that we restrict the processing of your personal data — for example, while a dispute about its accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract with you and is carried out by automated means, you may request that we provide your personal data in a machine-readable format.
• Right to withdraw consent: Where processing is based on your consent — in particular, marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You have the right to object to processing of your personal data based on fd7's legitimate interests. We will assess your objection and cease the relevant processing unless we have compelling legitimate grounds that override your interests.

fd7 will never discriminate against you for exercising your data privacy rights. Requesting access to your data, withdrawing marketing consent, or requesting deletion of your data will not result in any adverse treatment of your account, reduced service quality, or denial of access to any feature of the Platform that you are otherwise entitled to use.

7. Children's Privacy

The fd7 Platform is strictly intended for adults aged 18 years and above. fd7 does not knowingly collect personal data from any individual under the age of 18. Our registration process includes date-of-birth verification and account access controls designed to prevent underage access to gambling services.

fd7 strongly encourages parents and guardians to make use of parental control software and internet filtering tools to prevent children from accessing gambling websites. Resources and guidance on parental controls suitable for Bangladesh households are available from reputable child protection organisations. fd7 does not endorse any specific parental control product but recommends that households with minors take proactive steps to restrict access to age-restricted online content.

8. Policy Updates & Contact

fd7 reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, applicable legal requirements, or the range of services we offer to Bangladesh players. The effective date at the top of this page indicates when the current version was last reviewed and published.

Where we make material changes to this Privacy Policy — for example, introducing a new category of data collection or a new third-party sharing arrangement — we will provide prominent notice on the fd7 Platform and, where appropriate, notify registered players by email to the address associated with their account. Your continued use of the fd7 Platform following publication of a revised Privacy Policy constitutes acceptance of the updated terms.

We encourage you to revisit this page periodically to stay informed about how fd7 protects your personal information. The version history is maintained internally and can be provided on request.

Privacy enquiries and data rights requests should be directed to the fd7 support team using the contact details below. All privacy-related correspondence is treated as confidential and handled by authorised personnel only:

• Live Chat: Available 24/7 via your fd7 account dashboard. Average response time: 2–5 minutes.
• Email: [email protected] — please include "Privacy Request" in the subject line. Average response time: 2–6 hours.