Data Protection

addd7 Privacy Policy — Your Data, Your Rights, Our Commitment

addd7 takes the privacy and security of every registered player seriously. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and store it, and what rights you have as a player based in Bangladesh. We are committed to full transparency in how we handle your information.

Effective: 1 January 2026 Language: English Jurisdiction: Bangladesh 256-bit SSL

Privacy at a Glance

Six Core Data Protection Principles at addd7

addd7's approach to data privacy is built on six principles that guide every decision we make about how your personal information is collected, stored, and used.

Minimal Data Collection

addd7 collects only the personal data that is strictly necessary for account registration, identity verification, payment processing, and platform security. We do not collect data speculatively or beyond what is required for legitimate platform operations.

Secure Storage

All personal data held by addd7 is stored on encrypted, access-controlled servers. We apply 256-bit SSL encryption to all data in transit between your device and our platform. Access to player data within our organisation is restricted on a strict need-to-know basis.

No Third-Party Sale

addd7 does not sell, rent, or trade your personal data to any third-party organisation for commercial purposes. Your information is used solely for the purposes described in this Privacy Policy and is shared externally only where we have a legal obligation or legitimate operational need to do so.

Your Rights

You have the right to access the personal data addd7 holds about you, to request corrections to inacc urate information, and to request deletion of your data subject to our legal retention obligations. All such requests are handled promptly and free of charge.

Defined Retention Periods

addd7 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. Once the applicable retention period expires, your data is securely deleted or anonymised in accordance with our data lifecycle procedures.

Breach Notification

In the unlikely event of a data security incident that materially affects your personal information, addd7 is committed to notifying affected players promptly and transparently, providing clear information about what occurred and what steps we have taken to address it.

Contents

1. Introduction
2. Data Controller
3. Data We Collect
4. How We Collect Data
5. Purposes of Processing
6. Legal Basis
7. Data Sharing
8. Cookies & Tracking
9. Data Retention
10. Security Measures
11. Your Rights
12. Minors
13. Policy Changes
14. Contact Us

              Important Notice: This Privacy Policy applies to all players and visitors who access or use the addd7 platform at addd7.io, including its associated mobile interfaces. By registering an account or continuing to use addd7, you acknowledge that you have read and understood this Privacy Policy in full. If you do not agree with any part of this policy, you must discontinue use of the platform and contact us to request account closure.
            

1 Introduction

addd7 is an online sports betting and casino platform serving players in Bangladesh. We operate the addd7.io website and associated digital interfaces. In the course of providing our services, we collect and process certain personal data relating to our players, visitors, and prospective players.

This Privacy Policy sets out clearly and completely what personal data addd7 collects, the purposes for which that data is used, the legal basis upon which we rely for each category of processing, how long we retain your data, and your rights in relation to your personal data. We have written this policy in plain, accessible English so that every player can understand how their information is handled.

addd7 is committed to handling your personal data responsibly, lawfully, and in accordance with applicable data protection principles. If you have any questions about this policy or about how addd7 processes your data, you can contact us at any time using the details in Section 14.

                Effective Date: This Privacy Policy is effective from 1 January 2026 and supersedes all prior versions of the addd7 Privacy Policy. The most current version of this policy is always available at addd7.io/privacy-policy.
              

2 Data Controller

For the purposes of this Privacy Policy, addd7 acts as the data controller in respect of the personal data of its registered players and platform visitors. As data controller, addd7 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection obligations.

All data protection queries, access requests, correction requests, and deletion requests should be directed to addd7's support team at [email protected]. We aim to acknowledge all data-related queries within 48 hours and to provide a substantive response within 30 calendar days of receipt.

3 Personal Data We Collect

addd7 collects personal data in the following categories. We collect only what is necessary for each stated purpose and do not maintain unnecessary or disproportionate data about our players.

Category	Data Elements	Purpose
Identity Data	Full legal name, date of birth, National ID / passport number, selfie with ID	Account registration, KYC verification, age verification (21+)
Contact Data	Mobile number, email address, city/district of residence	Account management, support communications, security alerts
Financial Data	bKash / Nagad / Rocket / Upay account number, transaction reference numbers, deposit and withdrawal amounts in ৳	Payment processing, fraud prevention, AML compliance
Technical Data	IP address, device type, browser type and version, operating system, session timestamps	Platform security, fraud detection, service optimisation
Usage Data	Pages visited, games played, bets placed, bet amounts, session duration, login history	Responsible gaming monitoring, platform improvement, personalisation
Communications Data	Support chat logs, email correspondence, complaint records	Dispute resolution, service improvement, legal compliance

addd7 does not collect sensitive personal data such as biometric data (beyond identity photo for KYC), health data, religious affiliation, political opinions, or racial or ethnic origin. We do not collect data from social media profiles unless you voluntarily provide such information in a support communication.

4 How We Collect Your Data

4.1 Directly From You

The majority of your personal data is collected directly from you when you register an account on addd7, complete identity verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion. You are always informed at the point of collection about what data we are collecting and why.

4.2 Automatically During Platform Use

When you access addd7.io or use the addd7 platform, we automatically collect certain technical and usage data through server logs, cookies, and similar technologies. This includes your IP address, device identifiers, browser information, and behavioural data relating to your use of the platform. This data is collected to maintain platform security and to improve our services. See Section 8 for full details on our use of cookies.

4.3 From Third-Party Service Providers

addd7 may receive limited personal data from third-party service providers in specific circumstances. For example, our payment processing partners (bKash, Nagad, Rocket, Upay) may confirm transaction details to addd7 for the purpose of crediting your account. Our game studio partners (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may provide aggregated gameplay data to addd7 for responsible gaming monitoring purposes. In all cases, third-party data sharing is governed by data processing agreements that require the third party to handle your data lawfully and securely.

4.4 From Publicly Available Sources

In limited circumstances related to fraud prevention or KYC verification, addd7 may consult publicly available sources to verify information you have provided. This is done only where addd7 has a legitimate interest in confirming the accuracy of registration data, and only to the minimum extent necessary.

5 Purposes of Processing

addd7 processes your personal data for the following specific purposes:

Account Registration and Management: Creating and maintaining your player account, verifying your identity, and enabling you to access addd7 services.
Age Verification: Confirming that you are at least 21 years of age before permitting access to betting and gaming services, in accordance with addd7's 21+ policy.
Payment Processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and reconciling transaction records.
Responsible Gaming: Monitoring your gameplay patterns to identify signs of potential problem gambling and to administer self-exclusion, deposit limit, and session reminder tools at your request.
Fraud Prevention and Security: Detecting and preventing fraudulent activity, unauthorised account access, bonus abuse, and other security threats to the platform and to individual players.
Anti-Money Laundering (AML) Compliance: Meeting our obligations to identify, prevent, and report suspicious financial activity in accordance with applicable requirements.
Customer Support: Responding to your queries, complaints, and requests, and maintaining records of communications for dispute resolution purposes.
Service Improvement and Personalisation: Analysing usage patterns to improve platform performance, fix technical issues, and provide a more relevant experience where you have consented to personalisation.
Marketing Communications: Sending you promotional offers, bonus notifications, and other marketing communications where you have consented to receive them. You may withdraw consent at any time.
Legal and Regulatory Compliance: Meeting our obligations under applicable law, cooperating with law enforcement and regulatory bodies where legally required, and maintaining records as required by law.

Marketing Opt-Out: If you no longer wish to receive marketing communications from addd7, you can opt out at any time by contacting [email protected] or by using the unsubscribe link in any marketing email. Opting out of marketing does not affect our ability to send you transactional or security communications relating to your account.

6 Legal Basis for Processing

addd7 relies on the following legal bases for the processing of your personal data:

Contractual Necessity: Processing your identity data, contact data, and financial data is necessary for the performance of the contract between you and addd7 (i.e., your account terms). Without this processing, addd7 cannot provide you with access to the platform or process your transactions.
Legitimate Interests: addd7 processes technical and usage data on the basis of its legitimate interests in maintaining platform security, preventing fraud, detecting bonus abuse, and improving service quality. In each case, addd7 has assessed that its legitimate interests are not overridden by your privacy interests.
Legal Obligation: addd7 processes certain data (including identity verification documents and transaction records) to comply with its legal obligations under applicable anti-money laundering, fraud prevention, and record-keeping requirements.
Consent: Where addd7 sends marketing communications or engages in non-essential personalisation, it does so on the basis of your consent. You may withdraw consent at any time without affecting the lawfulness of any processing carried out before withdrawal.

7 Data Sharing & Disclosure

addd7 does not sell your personal data. We share your data with external parties only in the following limited circumstances:

7.1 Payment Processors

We share the minimum necessary financial and identity data with our payment partners (bKash, Nagad, Rocket, Upay) to process your deposit and withdrawal transactions. These partners process your data as independent controllers under their own privacy policies and are responsible for their own compliance obligations.

7.2 Game Studio Partners

addd7's game library is powered by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game provided by one of these studios, limited session and gameplay data may be transmitted to the relevant provider to enable the game to function. addd7 has data processing agreements in place with all game studio partners.

7.3 Identity Verification Services

addd7 may use third-party KYC and identity verification services to authenticate the documents you submit during the verification process. These services process your data solely for the purpose of verification and are prohibited from using your data for any other purpose.

7.4 Legal and Regulatory Authorities

addd7 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, where we receive a valid legal order or subpoena, or where disclosure is necessary to protect the rights, property, or safety of addd7, its players, or the public.

7.5 Business Transfers

In the event of a merger, acquisition, or sale of all or a material portion of addd7's business, player data may be transferred to the acquiring entity as part of that transaction. addd7 will notify affected players in advance of any such transfer and will ensure that the acquiring entity is bound by obligations no less protective than those in this Privacy Policy.

                No Cross-Border Transfers: addd7 processes and stores player data on servers serving the Bangladesh market. We do not routinely transfer personal data outside of the region in which it is collected, except where necessary for the operation of a specific service (such as a game studio's servers) and only where adequate data protection safeguards are in place.
              

8 Cookies & Tracking Technologies

addd7 uses cookies and similar tracking technologies on its platform to deliver and improve our services. A cookie is a small text file placed on your device when you visit a website. addd7 uses the following categories of cookies:

Strictly Necessary Cookies: These cookies are essential for the addd7 platform to function. They enable core features such as session management, login state, and security token validation. These cookies cannot be disabled without rendering the platform non-functional.
Functional Cookies: These cookies remember your preferences and settings (such as your preferred language or display settings) to provide a more personalised experience. They are not strictly necessary but enhance your use of the platform.
Analytical Cookies: addd7 uses analytical cookies to understand how players navigate and use the platform. This data is used in aggregated, anonymised form to identify areas for improvement. We use this data only for internal purposes and do not share it with advertising networks.
Security Cookies: These cookies support addd7's fraud detection and security monitoring systems by identifying unusual access patterns or potentially compromised sessions.

You can manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may limit the functionality of the addd7 platform. addd7 does not use third-party advertising cookies or behavioural tracking cookies for the purpose of serving targeted advertisements on external websites.

9 Data Retention

addd7 retains your personal data for no longer than is necessary for the purposes for which it was collected, taking into account our legal, regulatory, and operational requirements. The following retention periods apply:

Account and Identity Data: Retained for the duration of your account relationship with addd7, plus a minimum of five (5) years following account closure, to meet our AML record-keeping obligations.
Financial and Transaction Data: Retained for a minimum of five (5) years from the date of each transaction, in accordance with applicable financial record-keeping requirements.
KYC Verification Documents: Retained for the duration of your account plus five (5) years post-closure, or such longer period as may be required by law.
Support and Communications Data: Retained for three (3) years from the date of the communication, or until the matter to which the communication relates is fully resolved, whichever is later.
Technical and Usage Data: Typically retained in identifiable form for up to twelve (12) months, after which it is either deleted or anonymised for aggregated analytical purposes.
Marketing Consent Records: Retained for the period during which you are subscribed to marketing communications, plus two (2) years as evidence of consent.

Upon expiry of the applicable retention period, addd7 will securely delete or irreversibly anonymise your personal data. Anonymised data that cannot be linked back to an individual is not subject to this policy and may be retained indefinitely for analytical purposes.

10 Security Measures

addd7 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

256-bit SSL/TLS Encryption: All data transmitted between your device and the addd7 platform is encrypted using industry-standard 256-bit SSL/TLS protocols.
Encrypted Storage: Sensitive data fields (including payment account numbers and identity document references) are stored in encrypted form within our database infrastructure.
Access Controls: Internal access to player data is restricted to authorised addd7 personnel on a strict need-to-know basis. All internal access is logged and audited.
Two-Factor Authentication (2FA): addd7 offers 2FA for player accounts and requires it for all internal administrative access to production systems.
Regular Security Audits: addd7 conducts periodic internal security reviews and vulnerability assessments of its platform infrastructure.
Fraud Detection Systems: addd7 operates automated fraud detection systems that monitor for unusual account activity, login anomalies, and suspicious transaction patterns in real time.

While addd7 takes every reasonable precaution to protect your data, no internet-based system can guarantee absolute security. You are encouraged to use a strong, unique password for your addd7 account and to enable two-factor authentication where available. If you suspect that your account has been compromised, contact [email protected] immediately.

                Your Responsibility: addd7 cannot be held responsible for security breaches arising from your own failure to keep your account credentials secure, including sharing your password with a third party or using the addd7 platform on a shared or public device without logging out.
              

11 Your Rights

As a player and data subject, you have the following rights in relation to the personal data addd7 holds about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days.

Right of Access: You have the right to request a copy of the personal data addd7 holds about you, together with information about how and why it is being used. addd7 will provide this information free of charge in a commonly used electronic format.
Right to Rectification: If any personal data addd7 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain data directly through your account settings.
Right to Erasure: You have the right to request that addd7 delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent. This right is subject to addd7's legal retention obligations; we cannot delete data that we are required by law to retain.
Right to Restriction of Processing: You have the right to request that addd7 restrict processing of your personal data in certain circumstances, such as where you contest its accuracy or where you have objected to processing and we are considering your objection.
Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another service provider where technically feasible.
Right to Object: You have the right to object to processing based on addd7's legitimate interests at any time. You also have an absolute right to object to the processing of your personal data for direct marketing purposes.
Right to Withdraw Consent: Where addd7 processes your data on the basis of consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

                No Charge for Rights Requests: addd7 does not charge a fee for processing data rights requests unless a request is manifestly unfounded or excessive. In such rare cases, addd7 may charge a reasonable administrative fee or decline to act on the request, and will inform you of this decision with reasons.
              

12 Minors & Age Restriction

addd7 services are strictly intended for adults aged 21 years and above. addd7 does not knowingly collect personal data from any person under the age of 21. If addd7 discovers or is notified that a player account has been registered by or on behalf of a person under the age of 21, addd7 will immediately close the account, delete the associated personal data (subject to any legal retention obligations), and return any deposited funds.

If you are a parent or guardian and believe that a person under 21 in your care has registered an addd7 account, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

                21+ Policy: addd7 applies a strict 21+ age policy without exception. Age verification is conducted as part of the KYC process for all registered players. Providing false date of birth information to circumvent age verification is a material breach of addd7's Terms & Conditions.
              

13 Changes to This Privacy Policy

addd7 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or changes to the services we offer. When we make material changes to this policy, we will notify registered players via email or through an in-platform notification prior to the changes taking effect.

The effective date displayed at the top of this policy will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically so that you remain informed about how addd7 handles your personal data. Your continued use of the addd7 platform following the effective date of any revision constitutes your acceptance of the updated policy.

Previous versions of this Privacy Policy are available upon request by contacting [email protected].

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to addd7's handling of your personal data, please contact our data protection team using the details below. All correspondence must be submitted in English.

Email: [email protected]
Subject Line for Data Requests: "Data Rights Request" or "Privacy Query"
Support Hours: 24 hours a day, 7 days a week, 365 days a year
Time Zone: Bangladesh Standard Time (BST, UTC+6)
Response Time: Acknowledgement within 48 hours; substantive response within 30 calendar days

addd7 serves players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh. Our support team operates in Bangladesh Standard Time and is fully equipped to assist with data protection queries specific to Bangladeshi players.

Explore addd7

Your Data Is Protected — Now Explore the Platform

addd7 combines industry-leading data security with a premium betting and casino experience. Registered players aged 21 and above can explore cricket betting, live slots, and live casino games.

addd7 Login addd7 Casino Read Our FAQ Responsible Gaming