7jaya Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") describes how 7jaya ("7jaya", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "Player", "User") who access or use the 7jaya website at https://7jaya.io and its associated services, games, betting markets, payment facilities, live chat, and promotional communications (collectively, the "Services").

This Policy is incorporated by reference into, and forms part of, the 7jaya Terms and Conditions. By registering an account, accessing the platform, or using any of our Services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

7jaya is committed to handling personal data with transparency, integrity, and in compliance with internationally recognised data protection principles. Our data practices are aligned with the General Data Protection Regulation (GDPR) as a reference standard for data subject rights and controller obligations, even where the GDPR does not apply directly.

2. Personal Data We Collect

7jaya collects personal data across several categories depending on how you interact with our platform. The table below summarises the categories of data we may collect and the context in which each category is gathered.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data (except for identity verification photographs where required), health data, or data concerning a person's sex life or sexual orientation. If you voluntarily disclose such information in the course of a support interaction, it will be used solely to address your query and will not be retained beyond the resolution of that matter.

3. How We Collect Your Data

7jaya collects personal data through the following channels and mechanisms:

3.1 Direct Collection

Data you provide directly to us when completing registration forms, submitting KYC documents, initiating deposits or withdrawals, contacting our support team via live chat or email, participating in surveys or promotions, or updating your account profile settings.

3.2 Automated Technical Collection

When you access 7jaya, our systems automatically log certain technical information including your IP address, device identifiers, browser configuration, and session activity. This data is collected through server logs, session management systems, and first-party analytics tools embedded in the platform.

3.3 Cookies and Tracking Technologies

7jaya uses cookies and similar tracking technologies (see Section 7 for full details) to maintain session state, remember your preferences, deliver a consistent gaming experience, and analyse aggregate usage patterns. These technologies may collect usage and technical data automatically upon your visit to the platform.

3.4 Third-Party Sources

In limited circumstances, 7jaya may receive data about you from third-party sources including:

• Identity verification and KYC service providers who confirm the authenticity of documents you submit.
• Payment processors and mobile financial service operators (bKash, Nagad, Rocket, Upay) who confirm transaction status and account ownership.
• Fraud prevention databases and sanctions screening services that flag high-risk profiles or politically exposed persons (PEPs).
• Game content providers (Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, Ezugi) who share session and game-outcome data necessary to calculate winnings and maintain game integrity.

4. Purposes of Data Processing

7jaya processes your personal data for the following defined purposes. We do not use personal data for any purpose that is incompatible with the purposes listed below without first notifying you and, where required, obtaining your consent.

• Account Management: To create, maintain, and administer your 7jaya player account, including authentication, password management, and account security monitoring.
• Identity Verification (KYC): To verify your identity, confirm your eligibility to use the Services, and satisfy our Know Your Customer obligations in accordance with applicable anti-money laundering (AML) standards.
• Transaction Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported banking channels, and to maintain accurate financial records for your account.
• Platform Operation: To deliver games, betting markets, live casino services, and all other features of the 7jaya platform to you as a registered player.
• Customer Support: To respond to your queries, resolve complaints, investigate disputes, and manage your interactions with our support team across live chat, email, and other communication channels.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, account takeover, and other forms of abuse or illegal conduct on the platform.
• Responsible Gaming: To monitor gaming behaviour, identify indicators of problem gambling, enforce deposit limits and self-exclusion requests, and fulfil our responsible gaming obligations.
• Legal and Regulatory Compliance: To comply with applicable laws, regulations, court orders, and requests from competent authorities.
• Service Improvement: To analyse aggregate usage data, identify technical issues, optimise platform performance, and develop new features and product offerings.
• Marketing Communications: To send you promotional offers, bonus notifications, seasonal campaigns (such as Eid, BPL, and T20 World Cup promotions), and service updates — where you have opted in to receive such communications or where we have a legitimate interest in informing existing customers of relevant offers.

5. Legal Basis for Processing

Where data protection law requires that processing be grounded in a recognised legal basis, 7jaya relies on the following bases for the processing activities described in this Policy:

• Contractual Necessity: Processing required to perform the contract between you and 7jaya — including account management, payment processing, game delivery, and customer support.
• Legal Obligation: Processing required to comply with applicable law, including KYC/AML obligations, sanctions screening, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, service analytics, and direct marketing to existing customers — provided that our legitimate interests do not override your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for optional marketing communications. You may withdraw consent at any time by contacting our support team or using the opt-out link in any marketing message.

6. Data Sharing and Disclosure

7jaya does not sell, rent, or transfer your personal data to third parties for their own commercial or marketing purposes. We share personal data only in the circumstances described below, and only to the minimum extent necessary for the relevant purpose.

6.1 Service Providers and Data Processors

We engage carefully selected third-party service providers who process personal data on our behalf under binding data processing agreements. These providers are permitted to use your data only to deliver the specific services contracted and may not use it for any other purpose. Current categories of processor include:

• KYC and identity verification platforms.
• Payment processors and mobile financial service operators (bKash, Nagad, Rocket, Upay).
• Cloud hosting and infrastructure providers.
• Customer support platform providers.
• Fraud detection and AML screening services.
• Game content providers (Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, Ezugi) for purposes of game operation and outcome verification.
• Email and communication delivery services.

6.2 Legal and Regulatory Disclosures

7jaya may disclose personal data to competent authorities, law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, a valid legal order, or where we determine in good faith that disclosure is necessary to protect the rights, property, or safety of 7jaya, our players, or the public.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of 7jaya's assets, personal data held by 7jaya may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via a notice posted on the platform and, where required by law, via direct communication to your registered email address, with reasonable advance notice before your data becomes subject to a different privacy policy.

7. Cookies and Tracking Technologies

7jaya uses cookies and similar technologies (such as local storage, session storage, and pixel tags) to operate the platform, maintain session continuity, remember your preferences, and gather aggregate analytics data. The following categories of cookies are deployed on the 7jaya platform:

Strictly necessary cookies cannot be disabled as they are essential for the platform to function. All other cookie categories may be managed through your browser settings. Most modern browsers allow you to block, delete, or receive notifications for cookies. Please note that disabling functional or analytics cookies may affect the quality of your experience on the 7jaya platform.

7jaya does not use third-party advertising cookies or retargeting pixels that track your browsing activity across external websites.

8. Data Retention

7jaya retains personal data only for as long as is necessary to fulfil the purposes outlined in this Policy or as required by applicable law. The table below provides indicative retention periods for the principal categories of data we hold.

Upon expiry of the applicable retention period, data is either permanently deleted from our systems or anonymised such that it can no longer be attributed to any individual. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes.

9. Data Security

7jaya takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, alteration, or disclosure.

• Encryption in Transit: All data exchanged between your browser and 7jaya's servers is encrypted using TLS 1.2 or higher. Our SSL certificate ensures that connections are authenticated and data cannot be intercepted in transit.
• Encryption at Rest: Sensitive data fields stored in our databases — including identity document references, financial account identifiers, and authentication credentials — are encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Internal access to personal data is restricted to employees and contractors who require it to perform their job functions. Access is granted on a least-privilege basis and reviewed periodically.
• Two-Factor Authentication: Internal system access for 7jaya staff requires two-factor authentication. Players are encouraged to enable 2FA on their own accounts for additional protection.
• Regular Security Audits: 7jaya's platform and infrastructure are subject to periodic security assessments and vulnerability scanning to identify and remediate potential weaknesses.
• Incident Response: 7jaya maintains a documented data breach incident response plan. In the event of a breach affecting your personal data, we will notify you without undue delay and take immediate steps to contain the incident.

While 7jaya takes all reasonable precautions to protect your data, no system is entirely immune to risk. You play an important role in keeping your account secure by choosing a strong, unique password, never sharing your credentials, and notifying us immediately of any suspicious activity on your account at [email protected].

10. Your Data Protection Rights

As a 7jaya player, you hold the following rights in relation to your personal data. These rights may be subject to certain conditions and limitations under applicable law, and 7jaya will respond to all valid requests within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data 7jaya holds about you, together with information about how it is used and with whom it is shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held in your account. Minor corrections (such as contact details) can often be made directly from your account dashboard.
• Right to Erasure: You have the right to request deletion of your personal data in circumstances where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. This right is subject to our legal retention obligations, particularly under AML regulations.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data where you contest its accuracy, object to its use, or require us to retain it beyond the standard retention period for the purpose of a legal claim.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to 7jaya in a structured, commonly used, and machine-readable format (such as CSV or JSON), and to request that we transmit this data directly to another service provider where technically feasible.
• Right to Object: You have the right to object to processing based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, 7jaya will cease processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

To exercise any of these rights, please contact our support team via live chat or send a written request to [email protected]. We will acknowledge your request within 72 hours and provide a substantive response within 30 calendar days. In cases of complexity, this period may be extended by a further 30 days, with notice provided to you.

11. Children's Privacy

The 7jaya platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration process, and 7jaya reserves the right to request additional documentation at any time to confirm that a player meets the minimum age requirement.

If 7jaya becomes aware that personal data has been collected from a person under the age of 21 without appropriate verification, we will take immediate steps to delete that data and close the associated account. Any funds held in such an account will be handled in accordance with our Terms and Conditions and applicable law.

If you are a parent or guardian and believe that a minor in your care has registered an account or provided personal data to 7jaya without your knowledge, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

12. International Data Transfers

7jaya operates on infrastructure that may be hosted in data centres located outside Bangladesh. As a result, your personal data may be transferred to and processed in countries other than the country in which you are located. These transfers occur only where necessary to deliver the Services and are subject to appropriate safeguards to ensure that your data is protected to a standard consistent with this Policy.

Safeguards employed for international transfers include:

• Data processing agreements containing standard contractual clauses or equivalent transfer mechanisms that impose binding data protection obligations on the receiving party.
• Transfer to countries or service providers that maintain recognised adequacy decisions or equivalent certifications for data protection.
• Technical measures including encryption in transit and at rest to protect data during cross-border transfers.

By using 7jaya's Services and accepting this Policy, you acknowledge that your personal data may be transferred internationally in accordance with the safeguards described above.

13. Updates to This Policy

7jaya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory guidance, or platform functionality. The version number and effective date displayed at the top of this page indicate the most recently published version.

Where changes are material — meaning they significantly affect your rights or how we use your personal data — 7jaya will notify you in advance via a notice posted prominently on the platform and, where appropriate, via direct communication to your registered email address. We will provide reasonable notice before material changes take effect to allow you the opportunity to review the updated Policy.

Your continued use of 7jaya's Services following the effective date of any update constitutes your acceptance of the revised Policy. If you do not agree with the changes, you should cease using the Services and may request closure of your account by contacting our support team.

We recommend reviewing this Privacy Policy periodically to stay informed about how 7jaya protects your personal information. Archived versions of previous policies are available on request from our support team.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 7jaya handles your personal data, please contact our Data Protection team using the details below. All privacy-related enquiries are handled in English by our dedicated support team, available 24 hours a day, 7 days a week.

• Email: [email protected]
• Live Chat: Available directly on the 7jaya platform, 24/7
• Response Time: Acknowledgement within 72 hours; full response within 30 calendar days
• Support Language: English (for all Bangladesh players)
• Support Hours: 24 hours a day, 7 days a week, including Bangladesh public holidays

When submitting a privacy enquiry or data subject request, please include your registered account username or email address and a clear description of your request. This will allow us to locate your records efficiently and respond to your query in the shortest possible time.