Privacy Policy for ea7 Platform Users

Information We Collect

ea7 collects personal information from players across Bangladesh in order to operate our platform, verify user identities, process financial transactions, and comply with our obligations under applicable law. We are committed to collecting only the minimum data necessary for these purposes. The categories of personal data we collect are described below.

Information You Provide Directly

When you register an account, complete identity verification, or interact with our support team, you may provide the following categories of personal information:

Information Collected Automatically

When you use the ea7 platform — whether via a web browser on desktop or mobile — we automatically collect certain technical and behavioural data to ensure security, improve performance, and provide responsible gaming oversight:

• Device and Browser Data: IP address, device type, operating system version, browser type and version, screen resolution, and language settings.
• Session Data: Login timestamps, session duration, pages visited, game titles accessed, bet amounts placed, and feature interactions.
• Geolocation Data: Approximate geographic location derived from your IP address, used to detect access from restricted regions and to apply market-specific settings for Bangladesh.
• Transaction Logs: A full record of every deposit, withdrawal, bonus credit, wager, and win event associated with your account, retained for financial audit and dispute resolution purposes.
• Cookie and Tracking Data: Data collected via session cookies, analytics cookies, and responsible gaming tracking tools. See Section 4 (Cookies) for full details.

How We Use Your Information

ea7 processes your personal data only when we have a lawful basis for doing so. The primary lawful bases on which we rely are: (a) performance of a contract — processing your data is necessary to provide the services you have requested; (b) legal obligation — we are required by law to collect and retain certain data; (c) legitimate interests — we process certain data to operate and protect our platform, provided those interests are not overridden by your rights; and (d) consent — where we rely on consent, you may withdraw it at any time without penalty.

The table below summarises the key purposes for which ea7 uses your personal data:

Marketing Communications

ea7 may send you promotional emails, SMS notifications, or in-platform messages about bonuses, new games, sports betting markets (including BPL and IPL updates), and VIP program rewards — but only if you have opted in to receive such communications during registration or through your Account Settings. You may withdraw consent and unsubscribe from all marketing communications at any time by updating your notification preferences in your account dashboard or by contacting support at [email protected]. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out before the withdrawal, and it does not affect your ability to continue using the ea7 platform.

Data Sharing and Third Parties

ea7 does not sell, rent, or trade your personal data to any third party. We share personal data only in the limited circumstances described in this section, and only to the minimum extent necessary for each purpose.

Payment Service Providers

To process your deposits and withdrawals, ea7 shares the necessary financial and identity data with our payment partners, which include mobile financial service providers (bKash, Nagad, Rocket, Upay), domestic bank partners (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank), and international card schemes (Visa, Mastercard). These providers receive only the data required to execute the transaction and are contractually bound to handle it securely and in accordance with applicable financial data protection standards.

Game Technology Providers

The casino games and sports betting markets available on ea7 are powered by third-party software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. When you launch a game, limited session data (such as a pseudonymous session token and your account's currency balance) is shared with the relevant game provider to facilitate gameplay. No directly identifying personal data such as your full name, NID, or contact details is passed to game providers during standard gameplay.

Identity Verification Services

For KYC (Know Your Customer) compliance, ea7 may use a third-party identity verification service to authenticate documents such as your National Identity Card or passport. These providers process your identity documents solely for the purpose of verification and are prohibited from using them for any other purpose.

Analytics Providers

ea7 uses analytics tools to understand aggregate platform usage patterns and to improve the user experience. Any data shared with analytics providers is anonymised or pseudonymised prior to transmission — no personally identifiable information is included in analytics data streams.

Legal and Regulatory Disclosures

ea7 may be required by law or by a competent regulatory or judicial authority to disclose your personal data. In such cases, we will comply with the legally binding request and, where legally permitted to do so, will notify you of the disclosure. Such disclosures may be made to financial intelligence units, law enforcement agencies, or courts in connection with anti-money laundering investigations, fraud proceedings, or other lawful processes.

Cookies and Tracking Technologies

ea7 uses cookies and similar tracking technologies on its platform. A cookie is a small text file placed on your device when you visit a website. Cookies allow the website to recognise your device on subsequent visits, maintain your session, and remember your preferences. ea7 does not use cookies to track your browsing activity across unrelated third-party websites.

Types of Cookies Used

Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to refuse cookies, delete existing cookies, or be notified when a cookie is set. Please note that disabling strictly necessary cookies will prevent you from logging in to or using core features of the ea7 platform. Instructions for managing cookies in the most common browsers are available through each browser's own help documentation.

Data Retention and Storage

ea7 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Active Account Data: Retained for the full duration of your account relationship with ea7, plus a minimum of five years following account closure, to satisfy financial recordkeeping and AML compliance requirements.
• Identity Verification Documents: Retained for a minimum of five years after the completion of the KYC process, or five years after account closure, whichever is later.
• Transaction Records: All deposit, withdrawal, and betting transaction records are retained for a minimum of five years in accordance with standard financial audit requirements.
• Customer Support Correspondence: Retained for three years from the date of the last interaction related to a specific support ticket or dispute, then deleted unless the matter relates to an ongoing legal or regulatory proceeding.
• Marketing Consent Records: Retained for the duration of your subscription to marketing communications, plus three years following unsubscription, as evidence of consent history.
• Anonymised Analytics Data: May be retained indefinitely in anonymised and aggregated form, as it cannot be used to identify any individual.

Upon the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with ea7's internal data destruction procedures. Where deletion is requested by a user prior to the expiry of a mandatory retention period (see Section 6), ea7 will restrict active processing of the data while retaining it solely to meet legal obligations, and will delete it as soon as the mandatory period has elapsed.

Storage Location

Your personal data is primarily stored on servers located in secure, access-controlled data centre facilities. ea7 applies technical and organisational measures — including encryption at rest, regular security patching, and access logging — to protect data stored on these servers from unauthorised access, loss, or destruction.

Your Privacy Rights

ea7 respects your rights over your own personal data. As a player on the ea7 platform, you hold the following rights with respect to the personal information we hold about you. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Privacy Rights Request" and a description of your request.

Right of Access

You have the right to request a copy of all personal data that ea7 holds about you. Upon receipt of a verified access request, ea7 will provide a structured summary of your data within 30 calendar days. There is no charge for a first access request within any 12-month period.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For basic account details such as email address, phone number, or residential city, you may update these directly in your Account Settings without needing to contact support.

Right to Erasure

You may request that ea7 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other lawful basis applies), or where the data has been processed unlawfully. Please note that ea7 may be unable to fulfil an erasure request in full where it conflicts with our legal obligation to retain financial and identity records for the mandatory five-year period described in Section 5.

Right to Restrict Processing

You may request that ea7 suspend active processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being investigated. Restricted data will be stored but not actively used until the restriction is lifted.

Right to Data Portability

You have the right to receive a copy of the personal data you have provided to ea7 in a structured, commonly used, machine-readable format (such as CSV or JSON), and to transmit that data to another service provider of your choice, where technically feasible.

Right to Object

Where ea7 processes your personal data on the basis of legitimate interests, you have the right to object to that processing. ea7 will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defence of legal claims. You may also object to processing for direct marketing purposes at any time, with immediate effect.

Data Security Measures

Protecting your personal and financial data is a core operational commitment at ea7. We implement a layered security architecture designed to prevent unauthorised access, accidental loss, and unlawful destruction of personal data. Our key technical and organisational security measures include the following:

• Transport Layer Encryption: All data transmitted between your device and ea7's servers is encrypted using TLS 1.2 or higher (256-bit SSL). Connection security can be verified by the padlock icon in your browser's address bar.
• Encryption at Rest: Sensitive data fields — including NID numbers, financial account references, and identity document scans — are encrypted at rest in our database using AES-256 encryption.
• Password Security: Account passwords are never stored in plain text. ea7 uses a salted cryptographic hashing algorithm to store password credentials. Even ea7 employees cannot retrieve your plain-text password.
• Access Controls: Access to production systems and player data is restricted to authorised personnel on a strict need-to-know basis. All administrative access is logged, monitored, and subject to periodic access review.
• Two-Factor Authentication: ea7 supports and encourages the use of two-factor authentication (2FA) on all player accounts to provide an additional layer of protection beyond the username and password.
• Intrusion Detection: ea7's infrastructure is monitored continuously for anomalous activity, including unusual login patterns, bulk data access attempts, and suspicious API calls. Alerts are reviewed by our security team around the clock.
• Penetration Testing: ea7 commissions periodic independent security assessments to identify and remediate vulnerabilities before they can be exploited.

Data Breach Response

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, ea7 will notify affected users without undue delay, providing details of the nature of the breach, the categories and approximate volume of records affected, the likely consequences of the breach, and the steps ea7 is taking to address and mitigate it. ea7 maintains an internal incident response plan that is reviewed and updated on a regular basis.

Changes to This Policy

ea7 reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, the services we offer, or applicable legal requirements. The "Effective Date" at the top of this page will be updated whenever a material revision is made.

Where a change to this Privacy Policy is material — meaning it significantly affects how we collect, use, or share your personal data — ea7 will notify you via the email address registered on your account at least 14 days before the change takes effect. For minor clarifications or non-material updates (such as correcting a typographical error or adding additional detail to an existing practice), we may update the policy without prior individual notification, relying on the updated Effective Date as notice.

Your continued use of the ea7 platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with a revised policy, you should cease using ea7 and may request account closure and data deletion in accordance with Section 6 of this Policy.

Previous versions of this Privacy Policy are available on request by contacting [email protected]. All prior versions are retained in our internal document archive for a minimum of five years.