7c78 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how 7c78 ("7c78", "we", "us", "our"), the operator of the online betting and casino platform at https://7c78.io, collects, uses, stores, and discloses personal data about individuals ("you", "your") who register an account, visit the platform, or otherwise interact with 7c78 services.

7c78 takes the privacy of its players seriously. This Policy has been written to be clear, specific, and honest about our data practices. We collect only the data that is genuinely necessary to operate the platform, verify player identity, process financial transactions, and comply with our legal obligations.

This Policy applies to all players accessing 7c78 from Bangladesh and covers all data processing activities carried out by 7c78 in connection with the operation of the platform. It was last updated on 1 January 2026 and supersedes all previous versions.

2 Data We Collect

7c78 collects the following categories of personal data in connection with account registration, identity verification, financial transactions, gameplay, and platform operation:

7c78 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health records, or biometric data unless explicitly required by law and disclosed to you in advance.

3 How We Collect Your Data

7c78 collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automated technologies: When you visit and interact with the 7c78 platform, we automatically collect technical and usage data via cookies, server logs, and similar tracking technologies. See Section 8 for full details on cookies.
• Third-party sources: 7c78 may receive data about you from payment processors (such as bKash, Nagad, and Rocket) in connection with transaction verification, and from identity verification service providers used to confirm the authenticity of documents submitted during the KYC process.
• Game providers: Third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may provide 7c78 with gameplay data related to your sessions on their platforms, including round IDs, bet amounts, and game outcomes, for the purposes of dispute resolution and fair play auditing.

4 How We Use Your Data

7c78 uses collected personal data for the following specific purposes:

• Account management: Creating, maintaining, and closing player accounts; sending account-related notifications such as deposit confirmations, withdrawal updates, and security alerts.
• Identity and age verification: Confirming that all registered players are at least 21 years of age and are who they claim to be, in order to protect the integrity of the platform and comply with age restriction obligations.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other accepted payment methods. Financial data is shared with payment processors solely to the extent necessary to complete the transaction.
• Fraud prevention and security: Monitoring account activity, login patterns, and transaction behaviour to detect and prevent fraudulent activity, unauthorised access, money laundering, and other prohibited conduct as defined in the 7c78 Terms & Conditions.
• Legal and regulatory compliance: Retaining records as required by applicable anti-money laundering (AML) regulations and cooperating with lawful requests from regulatory or law enforcement authorities.
• Responsible gaming: Analysing gameplay patterns to identify signs of problem gambling behaviour and, where appropriate, proactively reaching out to players to offer responsible gaming tools.
• Platform improvement: Using aggregated and anonymised usage data to understand how players interact with the platform, identify bugs, and improve the overall user experience.
• Marketing communications: Sending promotional offers, bonus notifications, and platform news to players who have opted in to receive such communications. See Section 12 for details on managing your marketing preferences.

7c78 does not use personal data for automated decision-making processes that produce legal or similarly significant effects without human review, except where such processing is explicitly disclosed and consented to.

5 Legal Basis for Processing

All personal data processing carried out by 7c78 is grounded in one or more of the following legal bases:

• Performance of a contract: Processing is necessary to operate your 7c78 account, process transactions, verify your identity, and deliver the services you have registered to use. This is the primary basis for the majority of 7c78's data processing activities.
• Legal obligation: Processing is required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and lawful requests from competent authorities.
• Legitimate interests: Processing is necessary for 7c78's legitimate interests in fraud prevention, platform security, and improving our services, provided that those interests are not overridden by your fundamental rights and freedoms.
• Consent: For processing activities that are not strictly necessary for the performance of the contract — in particular, direct marketing communications and non-essential cookies — 7c78 relies on your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

6 Data Sharing & Disclosure

7c78 does not sell, rent, or trade your personal data to third parties for their own marketing purposes under any circumstances. Your data may be disclosed to the following categories of third parties only to the extent strictly necessary for the purposes set out in this Policy:

• Payment processors: bKash, Nagad, Rocket, Upay, SureCash, Dutch-Bangla Bank, Visa, and Mastercard receive the minimum financial data required to process your deposit or withdrawal transaction.
• Identity verification providers: Third-party KYC and document verification services receive identity documents and data solely to confirm your eligibility to use the platform.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified third-party studios may receive a unique player identifier and gameplay data necessary to deliver their games within the 7c78 environment.
• Technology and infrastructure providers: Cloud hosting, content delivery, and cybersecurity vendors that support the operation of the 7c78 platform process data on 7c78's behalf under strict data processing agreements that prohibit any independent use of the data.
• Legal and regulatory authorities: 7c78 will disclose personal data to law enforcement, financial intelligence units, or other competent authorities where required to do so by applicable law, a valid court order, or a lawful regulatory request.

All third-party service providers engaged by 7c78 are required to maintain appropriate technical and organisational security measures and are contractually prohibited from using your personal data for any purpose beyond that specified in their engagement with 7c78.

7 Data Retention

7c78 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account data: Retained for the duration of your active account plus a minimum of 5 years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction records: All deposit and withdrawal records are retained for a minimum of 7 years from the date of each transaction.
• Identity and KYC documents: Retained for the duration of your account plus 5 years from account closure, or longer if required by a specific regulatory obligation or ongoing investigation.
• Technical and usage logs: Server logs and session data are retained for up to 12 months for security and fraud investigation purposes, then deleted or anonymised.
• Marketing data: Retained until you withdraw consent to receive marketing communications, at which point your details are removed from active marketing lists within 5 business days. Suppression records are maintained indefinitely to prevent re-contact.

On expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data subject's identity.

8 Cookies & Tracking Technologies

The 7c78 platform uses cookies and similar tracking technologies to provide a functional, secure, and personalised user experience. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without affecting core platform functionality.
• Functional cookies: Remember your preferences, such as language settings and display options, to provide a more personalised experience on return visits.
• Analytics cookies: Collect aggregated data about how players navigate and use the platform. This data is used solely to improve platform performance and user experience. Analytics cookies are only set with your consent.
• Security cookies: Used to detect and prevent fraudulent login attempts and other malicious activity. These operate in the background and do not affect the visible functionality of the platform.

You can manage cookie preferences through your browser settings. Disabling certain non-essential cookies will not prevent you from using the 7c78 platform, though some personalisation features may be unavailable. Strictly necessary and security cookies cannot be disabled through browser settings, as they are essential to the safe operation of the platform.

9 Data Security

7c78 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 7c78 platform.
• Encryption at rest for all databases containing personal and financial data, using industry-standard AES-256 encryption.
• Access controls: Personal data is accessible only to 7c78 staff who require it for the performance of their specific role. All staff with access to personal data are subject to confidentiality obligations.
• Intrusion detection and monitoring: 7c78's infrastructure is continuously monitored for suspicious activity, unauthorised access attempts, and potential security vulnerabilities.
• Regular security audits: 7c78 conducts periodic security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• PCI-DSS compliant payment infrastructure: All card and mobile wallet payment processing is handled by PCI-DSS certified payment processors. 7c78 does not store full card numbers or mobile banking PINs on its own servers.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 7c78 will notify affected players promptly, providing details of the nature of the breach, the data involved, and the steps 7c78 is taking to address the situation.

10 Children's Privacy

The 7c78 platform is strictly intended for individuals who are 21 years of age or older. 7c78 does not knowingly collect, store, or process personal data belonging to individuals under the age of 21.

If 7c78 becomes aware that personal data has been collected from an individual who is under 21, that account will be immediately suspended, all associated data will be securely deleted, and any funds in the account will be returned to the payment source where technically feasible.

If you are a parent or guardian and you believe that your child has registered an account on the 7c78 platform, please contact 7c78 support immediately at the email address provided in Section 14. 7c78 will investigate promptly and take appropriate action.

11 Exercising Your Data Rights

As described in the feature cards at the top of this page, you hold six key data rights under this Privacy Policy: access, rectification, erasure, restriction of processing, data portability, and the right to object. To exercise any of these rights, please follow the process below:

1. Contact 7c78 support using the email address listed in Section 14, clearly stating the right you wish to exercise and providing your registered account username.
2. 7c78 may need to verify your identity before processing your request, to ensure that data is only disclosed to, or acted upon at the direction of, the legitimate account holder.
3. 7c78 will acknowledge your request within 5 business days and will aim to complete the request within 30 calendar days. If additional time is required due to the complexity or volume of the request, 7c78 will notify you within the initial 30-day period.
4. All requests are handled free of charge. If a request is manifestly unfounded or repetitive, 7c78 reserves the right to charge a reasonable administrative fee or decline to act.

Please note that some data rights are subject to limitations. For example, the right to erasure does not apply where 7c78 is required to retain data to comply with a legal obligation, such as AML record-keeping requirements. Where a limitation applies, 7c78 will explain the reason in its response to your request.

12 Marketing Preferences

7c78 may send you promotional offers, bonus announcements, tournament invitations, and platform news by email or mobile notification, provided you have given your consent to receive such communications at the time of registration or through your account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "unsubscribe" link included in any 7c78 marketing email.
• Updating your notification preferences in your 7c78 account settings dashboard.
• Contacting 7c78 support directly with a written request to opt out of all marketing communications.

Opting out of marketing communications will not affect your receipt of transactional messages, which include deposit confirmations, withdrawal notifications, account security alerts, and updates to the Terms & Conditions or Privacy Policy. These operational communications are sent regardless of marketing preferences, as they are necessary for the performance of the contract and the security of your account.

7c78 will process all marketing opt-out requests within 5 business days of receipt. Following opt-out, your contact details will be retained on a suppression list to ensure that you are not inadvertently re-added to marketing campaigns.

13 Updates to This Policy

7c78 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the range of services offered on the platform. When material changes are made, 7c78 will publish the revised Policy on this page with an updated effective date.

For significant changes — particularly those that affect how we use your personal data or that require fresh consent — 7c78 will also notify registered players via the email address associated with their account. The notification will summarise the key changes and provide a link to the full updated Policy.

Your continued use of the 7c78 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a material change to this Policy, you may request account closure by contacting 7c78 support. Any withdrawable balance will be returned to your nominated payment method following closure.

This Privacy Policy was last updated on 1 January 2026.

14 Contact & Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise a data right, want to report a potential data breach, or have a concern about how 7c78 handles your personal data, please contact the 7c78 Data & Privacy team. Our team is available 24 hours a day, 7 days a week.

Email: support at 7c78.io

Please include your registered account username, the subject of your enquiry, and any relevant details in your message. All privacy-related enquiries are treated with the highest priority and will receive an initial response within 2 business days.

7c78 aims to resolve all data and privacy concerns informally and directly. If you are not satisfied with 7c78's response to a data enquiry or complaint, you retain the right to escalate the matter through appropriate formal channels available in Bangladesh.