add7 Privacy Policy

Introduction

add7 is Bangladesh's trusted online betting and casino platform, providing cricket betting, live casino games, slots, crash games, and a wide range of other wagering products to players aged 21 and above. As an operator serving the Bangladesh market, add7 understands that the protection of your personal data is a fundamental responsibility and a cornerstone of the trust our players place in us.

This Policy applies to all data processing activities carried out by add7 in connection with the operation of the Platform, including data collected through the add7 website, mobile web interface, customer support channels, and any other touchpoint through which you interact with add7. It applies to all current and former players whose data we hold.

This Policy should be read in conjunction with the add7 Terms & Conditions and Responsible Gaming Policy, both of which are available on the Platform and are incorporated into this Policy by reference.

Who We Are

For the purposes of this Privacy Policy, the data controller responsible for the personal data of add7 players is the operating entity behind the add7 brand, accessible at add7.bio. add7 is operated as an online gaming and sports betting platform targeting players in Bangladesh, with all transactions conducted in Bangladeshi Taka (BDT).

All enquiries regarding this Privacy Policy, requests to exercise data rights, or concerns about how your personal data is handled should be directed to the add7 support team. Contact details are provided in Section 15 of this Policy.

Data We Collect

add7 collects only the personal data that is necessary for the lawful and efficient operation of the Platform. The categories of data we collect are as follows:

• Identity Data: Full legal name, date of birth, gender, and government-issued identification numbers (National Identity Card number, passport number) required for KYC verification and age verification (21+ compliance).
• Contact Data: Email address, mobile phone number, and residential city or district within Bangladesh (for example, Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar).
• Financial Data: Mobile financial service wallet identifiers (bKash, Nagad, Rocket, Upay), bank account details where applicable (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), and a full history of deposits and withdrawals made through your add7 account in BDT.
• Identity Document Images: Scanned or photographed copies of your National Identity Card (NID), passport, utility bill, or bank statement submitted during the KYC verification process.
• Technical Data: IP address, device identifiers, browser type and version, operating system, screen resolution, and session timestamps logged automatically when you access the Platform.
• Usage and Gaming Data: A record of all games played, wagers placed, bet amounts in BDT, outcomes, session durations, and platform navigation behaviour.
• Communications Data: The content of live chat conversations, email exchanges, and any other correspondence you send to or receive from the add7 support team.
• Marketing Preference Data: Your opted-in or opted-out status with respect to add7 promotional communications, including seasonal campaigns tied to BPL, IPL, Eid, and Pohela Boishakh.

How We Collect Your Data

add7 collects personal data through the following channels and mechanisms:

• Direct Collection: Data you provide voluntarily during account registration, the KYC submission process, deposit and withdrawal requests, support interactions, and promotional opt-in forms.
• Automated Technical Collection: Data gathered automatically through server logs, cookies, session tracking technologies, and similar tools when you browse or use the Platform. See Section 8 for full details of our cookies and tracking practices.
• Third-Party Sources: Data received from KYC verification service providers (used to confirm your identity documents), payment processors (used to confirm successful deposit and withdrawal transactions), and fraud detection partners (used to flag high-risk account behaviour). add7 may also receive publicly available information about individuals from authoritative sources where this is necessary for compliance or security purposes.

How We Use Your Data

add7 uses the personal data it collects for the following clearly defined purposes:

• Account Management: To create, maintain, and secure your add7 player account, including processing login requests, password resets, and account recovery procedures.
• Identity and Age Verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity as part of the KYC process required before processing withdrawals.
• Payment Processing: To facilitate BDT-denominated deposits via bKash, Nagad, Rocket, Upay, and supported bank channels, and to process withdrawal requests to your nominated payment method.
• Fraud and Security: To detect, investigate, and prevent fraudulent account activity, money laundering, identity theft, collusion, and the use of automated betting tools or bots.
• Responsible Gaming: To monitor your gaming behaviour for signs of problem gambling, to enable you to apply self-imposed limits, and to facilitate self-exclusion requests where needed.
• Customer Support: To respond to your enquiries, resolve disputes, investigate complaints, and improve the quality of our support service.
• Platform Improvement: To analyse aggregated usage patterns, identify technical issues, test new features, and optimise the overall player experience on the add7 platform.
• Marketing and Promotions: To send you relevant promotional offers, bonus notifications, and seasonal campaign communications (e.g., BPL cricket season promotions, Eid bonus offers) where you have provided your consent to receive such communications.
• Legal Compliance: To fulfil any legal obligations applicable to the operation of an online gaming platform, including record-keeping, responding to lawful requests from authorities, and enforcing our Terms & Conditions.

Legal Bases for Processing

add7 processes your personal data on the following legal bases, each of which applies to the processing activities described in this Policy:

• Contractual Necessity: Processing that is necessary to perform the contract between you and add7 — specifically, to provide the betting, casino, and payment services you have registered to use.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC identity verification, financial record retention, and fraud reporting duties.
• Legitimate Interests: Processing that serves the legitimate interests of add7 in operating a secure, fraud-free platform — including technical data collection for security monitoring, platform performance analysis, and responsible gaming oversight — provided such interests are not overridden by your rights and interests.
• Consent: Processing that relies on your freely given, specific, informed consent — principally the sending of marketing and promotional communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing & Third Parties

add7 does not sell, rent, or trade your personal data to any third party. We share your data only in the following limited and controlled circumstances:

• KYC and Identity Verification Providers: We share identity documents and personal details with trusted third-party KYC service providers to verify your identity and age. These providers are contractually bound to process your data solely for verification purposes and to maintain appropriate security standards.
• Payment Processors: We share the minimum necessary financial data with payment partners — including bKash, Nagad, Rocket, Upay, and supported bank gateways — to process deposits and withdrawals in BDT.
• Fraud Detection Partners: Aggregated technical and behavioural data may be shared with fraud prevention service providers to identify suspicious patterns and protect the integrity of the platform.
• Game Content Providers: Where you play games delivered by third-party studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), limited session data may be processed by those providers' systems to deliver the game content. Each provider operates under its own data processing agreements with add7.
• Legal and Regulatory Authorities: add7 may be required to disclose personal data to law enforcement agencies, courts, or regulatory bodies where required by applicable law or a valid legal order. In such cases, add7 will disclose the minimum data necessary and, where legally permitted, will notify the affected player.
• Business Transfers: In the event of a merger, acquisition, or sale of assets involving the add7 business, player data may be transferred to the acquiring entity, which will be required to honour this Privacy Policy or provide you with advance notice of any material changes.

Cookies & Tracking Technologies

add7 uses cookies and similar tracking technologies to operate core platform functionality, maintain your login session, and analyse how players interact with the site. The following categories of cookies are used on the add7 platform:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies maintain your authenticated session, remember your account preferences, and enable secure transactions. They cannot be disabled without impairing Platform functionality.
• Performance and Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate the Platform — which pages are visited most frequently, where users encounter errors, and how long sessions typically last. This data helps add7 identify improvements to the player experience.
• Functional Cookies: Store your optional preferences such as preferred language settings, display preferences, and any responsible gaming tool configurations you have applied to your account.
• Security Cookies: Used by our fraud detection systems to identify anomalous session behaviour, unusual login patterns, and potential account takeover attempts.

You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core features of the add7 platform, although certain optional preference features may not function as expected. add7 does not use advertising or third-party retargeting cookies.

Data Security

add7 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the add7 servers is encrypted using industry-standard TLS protocols, ensuring that your credentials and payment information cannot be intercepted in transit.
• Secure Server Infrastructure: Player data is stored on hardened servers with access controls, intrusion detection systems, and regular independent security audits.
• Access Controls: Access to player personal data within the add7 organisation is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data are trained in data protection best practices.
• Multi-Factor Authentication: Account login processes incorporate multi-factor authentication options to protect against unauthorised account access.
• Penetration Testing: add7 conducts periodic penetration testing and vulnerability assessments to identify and remediate potential security weaknesses before they can be exploited.

Despite these measures, no data transmission over the internet or storage system can be guaranteed to be 100% secure. In the event of a data security incident affecting your personal data, add7 will notify affected players without undue delay and take all reasonable steps to contain and remediate the incident.

Data Retention

add7 retains your personal data for no longer than is necessary to fulfil the purposes for which it was collected or to comply with applicable legal obligations. The following retention principles apply:

• Active Account Data: Personal data associated with an active add7 account is retained for the duration of the account's active status plus a minimum of five years following account closure, to meet financial record-keeping and anti-money laundering compliance requirements.
• KYC Documents: Identity documents submitted during KYC verification are retained for a minimum of five years following the closure of your account or the last transaction on your account, whichever is later.
• Transaction Records: All financial transaction records — including deposit and withdrawal histories in BDT — are retained for a minimum of seven years to satisfy financial compliance obligations.
• Support Communications: Live chat transcripts and email correspondence are retained for a minimum of three years to support dispute resolution and quality assurance processes.
• Marketing Data: Consent records and marketing preference data are retained for the duration of your account plus two years, or until you withdraw consent, whichever occurs first.

At the end of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with any individual player.

Your Rights

As a player on the add7 platform, you hold the following rights with respect to the personal data we process about you. add7 is committed to honouring these rights promptly and without unnecessary barriers:

• Right of Access: You have the right to request a copy of all personal data add7 holds about you, along with information about how that data is being processed. We will respond to verified access requests within 30 days of receipt.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic contact details directly within your account settings, or contact our support team for assistance with more complex corrections.
• Right to Erasure: You may request the deletion of your personal data from add7's systems, subject to any overriding legal retention obligations described in Section 10. We will process verified erasure requests within 30 days and confirm completion to you in writing.
• Right to Restriction: You have the right to request that add7 restrict the processing of your data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved, or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on your consent or on a contract with you, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to request that we transfer it directly to another data controller where technically feasible.
• Right to Object: You have the right to object at any time to the processing of your personal data for direct marketing purposes. You also have the right to object to processing based on legitimate interests, on grounds relating to your particular situation.
• Right to Withdraw Consent: Where add7 processes your data on the basis of your consent (principally for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, contact the add7 support team via live chat (available 24/7) or by email at [email protected]. add7 will verify your identity before processing any data rights request to protect against unauthorised access to player data. We will not charge a fee for reasonable requests.

Children & Minors

add7 strictly prohibits the use of its platform by any person under the age of 21. The add7 Platform is designed, marketed, and operated exclusively for adults aged 21 and above residing in Bangladesh. We do not knowingly collect, store, or process personal data relating to individuals under the age of 21.

All prospective players are required to confirm their age during registration, and identity verification (KYC) is conducted on all accounts prior to the processing of any withdrawal. Where add7 discovers or has reason to believe that a player account has been created by or on behalf of a person under the age of 21, we will immediately suspend that account, reverse any pending transactions, and permanently close the account. Any winnings accumulated by an underage player will be forfeited.

Third-Party Links

The add7 Platform may contain references to third-party game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) whose game content is delivered within the add7 environment. While add7 has data processing agreements in place with all game content providers, the privacy practices of these third-party studios are governed by their own privacy policies, which are separate from and independent of this Policy.

add7 is not responsible for the privacy practices, content, or data processing activities of any third-party provider. We recommend that you review the privacy policies of any third-party service providers whose products you use through the add7 Platform. add7 does not include external links to unrelated third-party websites on the Platform.

Policy Updates

add7 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, the services we offer, or applicable legal requirements. When we make material changes to this Policy, we will notify registered players by posting a prominent notice on the Platform and, where appropriate, by sending an email notification to the address associated with your account.

The "Last Updated" date displayed at the top of this Policy will be revised each time a new version is published. We encourage you to review this Policy periodically to stay informed about how add7 protects your personal data. Your continued use of the add7 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the changes.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way add7 handles your personal data, please contact our support team through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly through the add7 Platform
• Response Time: We aim to respond to all privacy-related enquiries within 2 hours during Bangladesh Standard Time (UTC+6) business hours, and within 24 hours at all other times.

When contacting add7 about a data rights request, please include your registered username, the email address associated with your account, and a clear description of your request. add7 will verify your identity before processing any request that involves access to, modification of, or deletion of personal data.