7bed Privacy Policy
— Your Data, Your Rights

Overview & Scope

This Privacy Policy ("Policy") describes how 7bed ("7bed", "we", "us", "our") collects, processes, stores, and shares personal data relating to individuals ("User", "Player", "you") who access or use the online betting and casino platform operated at https://7bed.io ("Platform"). This Policy applies to all personal data processed by 7bed in connection with your use of the Platform, including data collected via the website, mobile-optimised browser interface, customer support channels, and any promotional communications you receive from us.

This Policy should be read alongside the 7bed Terms & Conditions, available at 7bed.io/terms-conditions, which govern your overall use of the Platform. By accessing or using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with how we handle personal data, please discontinue use of the Platform and contact us to close your account.

Data Controller

7bed acts as the data controller in respect of the personal data it processes about registered users and visitors to the Platform. As data controller, 7bed determines the purposes and means by which personal data is processed. Where 7bed engages third-party processors — such as payment service providers, identity verification vendors, and game content studios — those parties act under 7bed's instructions and are bound by data-processing agreements that require them to maintain appropriate security and confidentiality standards.

If you have any questions about how 7bed processes your personal data, or if you wish to exercise any of the rights described in Section 11 of this Policy, you can contact 7bed's data team at [email protected]. All data-related enquiries are handled within 30 calendar days of receipt.

Data We Collect

The categories of personal data that 7bed collects and processes are set out in the table below. We collect only the data that is necessary for the purposes identified in Section 5 of this Policy.

We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, health data, or data concerning sexual orientation, unless expressly required by law and only to the minimum extent necessary.

How We Collect Data

7bed collects personal data through the following channels:

• Direct Registration: When you create a 7bed account, you provide identity, contact, and financial data directly via the registration form.
• Account Activity: Transactional and usage data is generated automatically as you place bets, play games, make deposits, request withdrawals, and navigate the Platform.
• Identity Verification (KYC): When we request identity verification, you submit documentary evidence (NID, passport, etc.) directly to our verification team via the Platform's secure upload function or via email to [email protected].
• Customer Support Interactions: When you contact our support team, we record the content of that communication along with metadata (time, channel, resolution) to maintain accurate service records.
• Technical Collection (Cookies and Server Logs): Our web servers automatically log technical data including IP addresses, browser fingerprints, and session identifiers. We also use first-party cookies and similar technologies as described in Section 10 of this Policy.
• Payment Processors: When you make a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, those providers share transaction confirmation data — including the wallet number and transaction reference — with 7bed to enable us to credit or debit your account correctly.

How We Use Your Data

7bed processes your personal data for the following purposes. Each purpose is linked to at least one legal basis described in Section 6 of this Policy.

• Account Registration and Management: To create and maintain your 7bed account, verify your identity and age, enforce the one-account-per-person rule, and ensure only eligible players access the Platform.
• Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay; to reconcile payment records; and to investigate and resolve payment disputes.
• Game and Betting Services: To record bet placements, calculate and pay out winnings, maintain game histories, and resolve disputes about game outcomes.
• Responsible Gaming: To monitor betting patterns for signs of problem gambling behaviour, to administer self-exclusion and deposit limit tools, and to contact players who may need support.
• Customer Support: To respond to your support requests, investigate complaints, and maintain a record of our interactions so we can provide consistent and accurate assistance.
• Fraud Prevention and Security: To detect and prevent fraudulent account activity, multi-accounting, money laundering, bonus abuse, use of automated betting software, and other prohibited conduct described in the Terms & Conditions.
• Legal and Regulatory Compliance: To comply with applicable anti-money laundering (AML) obligations, to retain records for the legally required periods, and to respond to lawful requests from law enforcement or regulatory authorities.
• Platform Improvement: To analyse aggregate usage patterns, improve the user experience, optimise game offerings, and fix technical issues. Where used for platform improvement, data is anonymised or pseudonymised wherever practicable.
• Marketing Communications: Where you have opted in to receive promotional communications, to send you information about bonuses, new games, seasonal promotions, and platform updates. You may withdraw marketing consent at any time by contacting [email protected].

Legal Bases for Processing

Every processing activity carried out by 7bed rests on at least one of the following legal bases:

• Contractual Necessity: Processing that is necessary to perform the contract with you (the Terms & Conditions) — including account management, transaction processing, and delivery of betting and gaming services.
• Legal Obligation: Processing that is required by law — including identity verification for age compliance, AML record-keeping, and cooperation with lawful law-enforcement requests.
• Legitimate Interests: Processing that serves 7bed's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics — provided those interests are not overridden by your privacy rights. We conduct a balancing test before relying on legitimate interests as a basis.
• Consent: Processing that is based on your freely given, specific, and informed consent — principally marketing communications. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing & Disclosure

7bed does not sell, rent, or trade your personal data. We share data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment Service Providers: We share transaction-related data with bKash, Nagad, Rocket, and Upay to facilitate deposits and withdrawals. These providers process data in accordance with their own privacy policies and are subject to contractual data-protection requirements imposed by 7bed.
• Identity Verification Partners: For KYC compliance, we may share identity document data with third-party verification vendors operating in Bangladesh. These vendors process data solely for the purpose of identity and age verification and are bound by strict confidentiality agreements.
• Game Content Providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised or pseudonymised session data (e.g., game rounds played, stakes placed) for RTP auditing and game performance reporting. These studios do not receive your personally identifiable information unless required for dispute resolution.
• Fraud Prevention and Risk Services: We may share limited technical data (IP address, device fingerprint, account age) with fraud-prevention platforms to identify and block suspicious activity across the industry.
• Legal Authorities: We will disclose personal data to law enforcement, courts, or regulatory bodies when required to do so by law, court order, or to protect the rights, property, or safety of 7bed, its users, or the public. We will notify you of such disclosure unless legally prohibited from doing so.
• Business Transfers: In the event that 7bed undergoes a merger, acquisition, or sale of assets, personal data held about registered users may be transferred to the acquiring entity. You will be notified in advance of any such transfer and of any material change to this Privacy Policy that results.

Data Retention

7bed retains personal data for only as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable legal or regulatory obligations. The following indicative retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual. Where anonymisation is not practicable, data is deleted using secure overwrite methods consistent with industry standards.

Security Measures

7bed implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our current security measures include:

• Encryption in Transit: All data transmitted between your browser and 7bed's servers is encrypted using TLS 1.3. Our SSL certificate is maintained and renewed continuously to ensure uninterrupted encryption coverage.
• Encryption at Rest: Personal data stored in 7bed's databases is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data and are subject to regular rotation.
• Access Controls: Access to personal data is granted on a strict need-to-know basis. All staff with access to production data undergo background screening and are bound by confidentiality obligations. Access is reviewed regularly and revoked promptly upon role changes or departure.
• Password Security: User passwords are never stored in plaintext. We use industry-standard bcrypt hashing with a high work factor to store password hashes. Passwords are never transmitted to or stored by any third party.
• Intrusion Detection and Monitoring: 7bed employs automated intrusion detection systems, rate-limiting, and anomaly-detection tools to identify and respond to suspicious activity in real time.
• Penetration Testing: 7bed's infrastructure undergoes periodic security assessments and penetration testing by independent security professionals to identify and remediate vulnerabilities.

Despite these measures, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that poses a risk to your rights and freedoms, 7bed will notify affected users without undue delay via the contact details registered to their account.

Cookies & Tracking Technologies

7bed uses first-party cookies and similar browser-based storage technologies to operate and improve the Platform. We do not use third-party advertising cookies or cross-site tracking technologies. The cookies used by 7bed fall into the following categories:

• Essential Cookies: Required for the Platform to function. These include session authentication cookies (to keep you logged in), security tokens (to protect against cross-site request forgery), and load-balancing cookies. These cannot be disabled without rendering the Platform non-functional.
• Functional Cookies: Store your preferences such as language, odds format, and responsible gaming settings. These improve your experience but are not strictly essential.
• Analytics Cookies: First-party analytics cookies help us understand how players use the Platform — which pages are visited most, where users encounter errors, and how navigation flows can be improved. Analytics data is aggregated and not linked to individual identities where avoidable.

You can manage cookie preferences through your browser settings. Blocking essential cookies will prevent you from logging into the Platform. Blocking functional or analytics cookies will not prevent you from using core betting and gaming features but may reduce the quality of your experience.

Your Rights

As a 7bed user, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days. We may ask you to verify your identity before processing a rights request.

Please note that certain rights are subject to limitations. For example, the right to erasure does not apply where we are required to retain data by law (such as AML record-keeping obligations). In such cases we will explain the applicable restriction clearly when responding to your request.

Minors & Age Policy

The 7bed Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we discover — through age verification, identity checks, or any other means — that a registered user is below the minimum age of 21, we will immediately suspend the account, void any bets or winnings, return any deposited funds to the originating payment method where possible, and permanently delete the personal data associated with that account.

Parents and guardians who believe that a minor may have registered on the 7bed Platform without consent are encouraged to contact us immediately at [email protected]. We will investigate and take action within 24 hours of receiving a verified report.

International Transfers

7bed primarily stores and processes personal data on servers located in or serving the Bangladesh region. However, some of our third-party service providers — including game content studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may process certain data on infrastructure located outside Bangladesh. Where such international transfers occur, 7bed ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this Policy.

Safeguards used for international transfers include contractual data-protection clauses agreed with each service provider that impose obligations on the recipient equivalent to those applicable to 7bed, restrictions on onward transfers, data minimisation requirements so that only the minimum necessary data is transferred, and requirements for prompt notification in the event of a data breach affecting transferred data.

If you have questions about the international transfer safeguards applicable to a specific third-party processor, you may request further information by contacting [email protected].

Changes to This Policy

7bed reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data-processing practices, applicable law, or the services we provide. When we make material changes to this Policy, we will notify registered users by posting a prominent notice on the Platform and, where practicable, by sending an email to the address registered to your account. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision.

Your continued use of the Platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with the changes, you should discontinue use of the Platform and contact [email protected] to request account closure. We will retain your data for the periods specified in Section 8 even after account closure, where required by law.

Contact & Complaints

If you have any questions, concerns, or complaints relating to this Privacy Policy or to how 7bed processes your personal data, please contact our data team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

• Email: [email protected] (subject line: "Privacy Enquiry" or "Data Rights Request")
• Response Time: We aim to acknowledge all privacy enquiries within 2 business days and provide a substantive response within 30 calendar days.
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)
• Serving: All divisions of Bangladesh — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority or consumer protection body in your jurisdiction. 7bed will cooperate fully with any such regulatory investigation.