c7c Privacy Policy — How We Protect Your Data
Your privacy matters to us. This policy explains exactly what data c7c collects from registered players in Bangladesh, why we collect it, and how we keep it safe.
Introduction
Last updated: January 2026This Privacy Policy ("Policy") describes how c7c ("we", "us", "our") collects, uses, stores, shares, and protects personal information provided by or obtained from individuals who visit, register with, or otherwise use the c7c platform at c7c.asia ("Platform"). This Policy applies to all registered players in Bangladesh and to any individual who interacts with c7c through the Platform, including during account registration, identity verification, deposits, withdrawals, gameplay, customer support interactions, and promotional participation.
By creating an account or continuing to use c7c, you confirm that you have read and understood this Policy and that you consent to the collection and use of your personal information as described herein. If you do not agree with any part of this Policy, you should not register an account or use the Platform. This Policy should be read alongside our Terms and Conditions, which govern your use of c7c more broadly.
Our Privacy Commitments
1. Information We Collect
c7c collects personal information from you in three principal ways: information you provide directly during account registration and ongoing use; financial and transaction data generated by your deposits, withdrawals, and gameplay; and technical data collected automatically by our systems when you access the Platform. The categories of data we collect are detailed below.
- Full name as it appears on your government-issued identification document.
- Date of birth (used to verify that you meet the 21+ age requirement).
- Mobile phone number (your primary account identifier and the contact point for SMS-based verification and account notifications).
- Residential address (district and division within Bangladesh, collected as part of the account profile and used for fraud prevention and regulatory compliance).
- Payment method type and the masked account or card identifier (e.g. last four digits of card, or the registered mobile wallet number — never full card numbers or wallet PINs).
- Transaction amounts in BDT, timestamps, and transaction reference numbers generated by c7c's payment processing system.
- Deposit and withdrawal history for your account, retained for internal audit, anti-money-laundering compliance, and dispute resolution purposes.
- IP address and approximate geographic location derived from the IP address (used to detect access from restricted jurisdictions and to prevent fraud).
- Device type, operating system version, mobile browser type and version, and screen resolution (used to optimise the Platform's display and performance on your specific device).
- Session logs including pages visited, games played, bets placed, duration of sessions, and click-through behaviour within the Platform (used for fraud detection, responsible gaming monitoring, and platform improvement).
2. How We Use Your Information
c7c uses the personal information it collects for specific, documented purposes. We do not use your data for any purpose that was not disclosed at the time of collection, and we do not use your data for any purpose that is incompatible with the purposes listed below without obtaining your prior explicit consent.
- Account creation, management, and maintenance — including identity verification (KYC), age verification, password reset, and account recovery processes.
- Processing financial transactions — receiving and confirming deposits via bKash, Nagad, Rocket, Visa, and Mastercard; processing withdrawal requests to your registered mobile wallet; and maintaining accurate BDT account balances.
- Fraud prevention and security monitoring — detecting suspicious login activity, identifying unauthorised access attempts, flagging unusual transaction patterns, and operating our anti-money-laundering (AML) compliance programme.
- Responsible gaming support — monitoring gameplay patterns to identify potential problem gambling behaviours; sending responsible gaming reminders; and facilitating the activation of player-requested tools such as deposit limits, session reminders, and self-exclusion.
- Customer support — responding to queries, complaints, and disputes submitted via live chat or email; verifying your identity when you contact support; and maintaining records of support interactions for quality assurance.
- Marketing and promotions — with your consent, sending you information about c7c bonuses, seasonal promotions (including BPL season offers, Eid specials, and Pohela Boishakh campaigns), and platform updates. You may withdraw marketing consent at any time by contacting support.
3. Legal Basis for Processing
c7c processes your personal data on the basis of one or more of the following legal grounds: (a) Performance of a contract — processing is necessary to provide the services you have registered for and to fulfil our obligations as a platform under our Terms and Conditions; (b) Legal obligation — processing is required to comply with applicable anti-money-laundering regulations, age verification obligations, and fraud prevention requirements; (c) Legitimate interests — processing is necessary for c7c's legitimate interests in operating a secure, fraud-free platform, provided those interests are not overridden by your data protection rights; and (d) Consent — where c7c relies on your consent (for example, for marketing communications), you have the right to withdraw that consent at any time.
Where c7c relies on consent as the legal basis for a specific processing activity, you will be informed of this at the time your consent is sought. You may withdraw any consent you have given at any time by contacting [email protected]; withdrawal of consent will not affect the lawfulness of any processing that took place before the withdrawal.
4. Sharing Your Information
c7c does not sell your personal data to third parties. We share your personal information only in the limited circumstances described below. In all cases where we share data, we require the receiving party to maintain appropriate data protection standards and to use the data only for the specified purpose.
- Payment processing partners — c7c works with payment service providers including bKash, Nagad, and Rocket to process your deposits and withdrawals. These providers receive only the minimum data necessary to process the specific transaction (e.g. your registered mobile number and the transaction amount). They are contractually prohibited from using this data for any purpose other than processing your payment.
- Identity verification providers — in connection with our KYC obligations, c7c may share identity documents or verification data with trusted third-party identity verification services. These services are engaged solely to confirm the authenticity of your identification and are prohibited from retaining or using your data beyond this purpose.
- Game content and platform technology providers — providers such as Pragmatic Play, Evolution Gaming, and Spribe who supply games and platform infrastructure to c7c may receive anonymised or aggregated session data for the purposes of game performance monitoring and RNG audit compliance. They do not receive personally identifiable information linking game sessions to individual named players.
- Law enforcement and regulatory authorities — c7c will disclose personal data to police, financial intelligence units, or other governmental authorities where required to do so by applicable law, or where c7c determines in good faith that disclosure is necessary to prevent, investigate, or respond to illegal activity, fraud, or a threat to safety.
5. Cookies and Tracking Technologies
c7c uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device by your browser when you visit c7c. We use the following categories of cookies: (a) Essential cookies — strictly necessary for the Platform to function, including session authentication cookies that keep you logged in during your visit and security cookies that help detect fraudulent activity; (b) Functional cookies — used to remember your preferences such as your chosen language and display settings; and (c) Analytics cookies — used to collect anonymised data about how players navigate and use the Platform, helping us identify areas for improvement. We do not use third-party advertising cookies or tracking pixels for behavioural advertising.
Most mobile browsers allow you to control cookie settings through your browser's privacy or settings menu. You may choose to block or delete cookies; however, disabling essential cookies will affect the functionality of the Platform and may prevent you from logging in or using certain features. Where applicable law requires us to obtain your consent before placing non-essential cookies, we will do so via an in-Platform consent mechanism.
6. Data Retention
c7c retains your personal data for as long as your account is active and for a period thereafter as required by applicable law or as necessary for the purposes described in this Policy. In practice, this means: identity and registration data is retained for the duration of your account plus a minimum of five years after account closure, in order to comply with anti-money-laundering record-keeping requirements; transaction records are retained for a minimum of five years from the date of the transaction; and session logs and technical data are typically retained for twelve months and then deleted or anonymised.
When data is no longer required for operational or legal purposes, c7c will securely delete or anonymise it. If you request deletion of your account and personal data, c7c will action this request within 30 days, subject to any overriding legal retention obligation. We will confirm the outcome of your deletion request in writing via the email or phone number associated with your account.
7. Security of Your Data
c7c implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data transmitted between your device and our servers; encrypted storage of sensitive personal data at rest; role-based access controls that restrict access to personal data to authorised c7c personnel only; regular internal security reviews and vulnerability assessments; and two-factor authentication (2FA) options available to all registered players to protect account access.
While c7c takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You also play an important role in keeping your account secure: choose a strong, unique password for your c7c account; never share your login credentials with anyone; and notify [email protected] immediately if you suspect that your account has been compromised or that your registered phone number has been accessed without your authorisation.
8. Your Data Protection Rights
As a registered c7c player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected]. We will respond to all verified requests within 30 days.
-
Right of AccessYou have the right to request a copy of the personal data c7c holds about you, along with information about how it is being used. We will provide this in a clear, accessible format.
-
Right to RectificationIf any personal data c7c holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For most account details, you can update this directly through your account settings.
-
Right to ErasureSubject to applicable legal retention requirements, you have the right to request that c7c delete your personal data. This right may be limited where retention is necessary for legal compliance, dispute resolution, or fraud prevention.
-
Right to Restrict ProcessingIn certain circumstances, you may request that c7c limit the way it uses your personal data — for example, where you contest the accuracy of the data or where you have objected to its use on the grounds of legitimate interests.
-
Right to Data PortabilityWhere processing is based on your consent or on a contract, you have the right to receive a structured, machine-readable copy of the personal data you have provided to c7c, so that you may transfer it to another service provider if you wish.
9. Children and Underage Players
c7c is strictly for adults aged 21 and above. We do not knowingly collect personal data from any individual who is under 21 years of age. If you are under 21, you must not register an account or use the c7c platform under any circumstances. If c7c discovers or has reason to believe that personal data has been collected from a person under the age of 21, we will immediately close the associated account, void any pending transactions, and securely delete the data collected from that individual. If you are a parent or guardian and you believe your child has registered an account or provided personal data to c7c, please contact us immediately at [email protected] so that we can take the necessary steps to remove the account and the associated data.
10. Changes to This Privacy Policy
c7c reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this Policy — for example, changes to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — we will endeavour to notify registered players by posting a prominent notice on the Platform or by sending a notification to your registered mobile number. The revised Policy will be effective from the date it is published on the Platform.
Your continued use of the c7c Platform after a revised Privacy Policy has been published constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you should cease using the Platform and may request closure of your account by contacting our support team. We recommend that you review this Policy periodically to stay informed about how c7c handles your personal data.
11. Contact Us About Privacy
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way c7c handles your personal data, please contact our support team. We are committed to handling all privacy-related queries promptly and transparently. For data subject rights requests (access, rectification, erasure, portability, or restriction), please include your full name and registered mobile number in your message so that we can verify your identity before processing the request.