7joya Privacy Policy — How We Collect, Use, and Protect Your Personal Data

7joya ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every player who registers and uses our online cricket betting and casino services at https://7joya.io. This Privacy Policy has been written to give you a clear and honest account of our data practices so that you can make informed decisions about your personal information.

This Privacy Policy applies to all personal data collected by 7joya through the website, through account registration forms, through financial transactions, through customer support interactions, and through any other means by which you interact with the 7joya platform. It applies to players based in Bangladesh and to any other individual whose personal data we process in connection with the provision of our services.

By registering an account with 7joya and accepting our Terms & Conditions, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with the practices described in this policy, you should not use the 7joya platform.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are published on the 7joya website.

7joya collects the following categories of personal data in the course of operating the platform and providing services to players in Bangladesh:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, unless this is strictly required for a specific legal compliance obligation and you have been notified separately.

7joya collects personal data through the following channels:

• Direct submission: When you register an account, complete your profile, make a deposit or withdrawal, submit KYC documents, contact support, or respond to a survey or promotion, you provide data directly to us.
• Automated collection: When you browse the 7joya website, our servers automatically record technical data including your IP address, device identifiers, and browsing behaviour. This data is collected via server logs, cookies, and similar tracking technologies (see Section 9 for full cookie details).
• Payment processors: When you make a deposit via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, your payment provider shares transaction confirmation data with 7joya to verify the payment has been completed.
• Identity verification services: Where 7joya uses a third-party identity verification provider to assist with KYC checks, that provider may share verification results and document authenticity assessments with us.
• Publicly available sources: In limited circumstances, 7joya may cross-reference information you provide against publicly available databases for fraud prevention and compliance purposes.

7joya uses the personal data it collects for the following specific purposes:

• Account management: To create, maintain, and administer your 7joya player account, including managing your balance, transaction history, and account settings.
• Identity and age verification: To confirm that you are aged 21 or above and to verify your identity in compliance with our KYC obligations. The 7joya platform is strictly for adults.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and card networks, and to maintain accurate financial records associated with your account.
• Platform security and fraud prevention: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, and any other prohibited conduct as defined in the Terms & Conditions.
• Responsible gaming: To monitor your gaming behaviour for signs of problem gambling and to apply responsible gaming tools such as deposit limits, cooling-off periods, or self-exclusion where appropriate or requested.
• Customer support: To respond to your queries, complaints, and disputes in a timely and informed manner.
• Service improvement: To analyse how players use the 7joya platform and to make improvements to performance, design, game selection, and overall user experience.
• Marketing communications: To send you promotional offers, bonus notifications, and news about new games or features — but only where you have provided explicit consent to receive such communications. You may withdraw this consent at any time by contacting [email protected].
• Legal compliance: To fulfil any obligations imposed on 7joya by applicable laws and regulations, including responding to lawful requests from competent authorities.

7joya processes your personal data on the following legal grounds, depending on the specific processing activity:

• Contractual necessity: The majority of our data processing is necessary to perform the contract between 7joya and you as a registered player. This includes account management, payment processing, and KYC verification.
• Legitimate interests: Certain processing activities — including fraud detection, platform security, and service improvement analytics — are carried out on the basis of 7joya's legitimate interest in operating a secure and well-functioning platform. We have assessed that these interests are not overridden by your privacy rights in the circumstances.
• Legal obligation: Some processing is required to comply with legal obligations applicable to 7joya, including anti-money-laundering record-keeping and responding to lawful requests from authorities.
• Consent: Where processing is not covered by the above grounds — in particular, for direct marketing communications — we rely on your freely given, specific, and informed consent. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7joya does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may, however, share your data with the following categories of recipients under strict confidentiality obligations:

• Payment service providers: bKash, Nagad, Rocket, Upay, and international card networks receive the minimum data necessary to process your transactions. These providers are subject to their own privacy and security standards.
• Identity verification providers: Third-party KYC and identity verification services used to confirm your identity and age may receive copies of verification documents you submit. They are contractually bound to use this data only for verification purposes.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data necessary to deliver their games within the 7joya platform. These providers do not receive your personal identity data.
• IT infrastructure and hosting providers: Cloud hosting and server infrastructure providers used to operate the 7joya platform may have access to data stored on their systems. All such providers are vetted for security compliance.
• Legal and regulatory authorities: 7joya may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by law or where disclosure is necessary to prevent fraud, money laundering, or other criminal activity.
• Professional advisers: Lawyers, accountants, and auditors who provide professional services to 7joya may access personal data on a strictly need-to-know basis under binding confidentiality agreements.

7joya retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. The following retention periods apply as a general guide:

• Active account data (identity, contact, and financial data): Retained for the duration of your account relationship with 7joya plus a minimum of 5 years after account closure, in accordance with standard financial record-keeping obligations.
• KYC verification documents: Retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction to satisfy financial audit and anti-money-laundering record-keeping requirements.
• Customer support communications: Retained for 2 years from the date of the interaction, unless the communication relates to an unresolved dispute or legal matter, in which case it is retained until the matter is resolved.
• Technical and usage data: Anonymised after 12 months unless retained in identifiable form for an ongoing security investigation.
• Marketing consent records: Retained for the duration of the marketing relationship plus 2 years after consent is withdrawn, as evidence of the original consent.

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised so that it can no longer be linked to you as an individual.

7joya takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or alteration:

• 256-bit SSL/TLS encryption: All data transmitted between your browser or device and the 7joya servers is encrypted using industry-standard 256-bit SSL/TLS protocols. This protects your login credentials, financial data, and personal information in transit.
• Encrypted data storage: Sensitive personal data stored in 7joya's databases — including payment account details and identity document information — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within 7joya is restricted to employees and contractors who require it to perform their specific job functions. All staff with data access are bound by confidentiality obligations and receive data protection training.
• Fraud monitoring systems: Automated systems monitor the platform continuously for unusual transaction patterns, multiple account signals, and other fraud indicators.
• Penetration testing and security audits: 7joya conducts periodic security reviews and vulnerability assessments to identify and address potential weaknesses in the platform's infrastructure.
• Incident response: In the event of a personal data breach that poses a risk to your rights and freedoms, 7joya will notify affected players and take immediate remedial action without undue delay.

While 7joya implements robust security measures, no digital system is entirely immune to risk. You also have a role to play in keeping your account secure — use a strong, unique password, do not share your login credentials with anyone, and contact [email protected] immediately if you suspect unauthorised access to your account.

The 7joya website uses cookies and similar tracking technologies to improve your browsing experience, maintain your session, and collect anonymised analytics data. The following types of cookies may be placed on your device when you visit 7joya:

• Strictly necessary cookies: These cookies are essential for the 7joya website to function. They maintain your login session, remember your language preference, and enable core platform features. These cookies cannot be disabled without disrupting the service.
• Functional cookies: These cookies remember your preferences — such as your preferred deposit method or notification settings — so that you do not need to re-enter them on each visit.
• Analytics cookies: These cookies collect anonymised information about how players navigate the 7joya website — which pages are visited most frequently, where users arrive from, and how long they spend on certain pages. This data is used solely to improve the platform.
• Security cookies: These cookies help identify and prevent fraudulent activity, including detecting unusual login patterns or suspicious transaction behaviour.

7joya does not use third-party advertising cookies or behavioural tracking cookies that build a profile of your interests for external advertising networks.

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair the functionality of the 7joya platform and may prevent you from logging in or completing transactions.

As a 7joya player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving your request.

The 7joya platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a person under 21 has registered an account or provided personal data to 7joya, we will immediately suspend the account, delete the associated data, and refund any deposits minus any bonuses claimed, in accordance with our Terms & Conditions.

Parents and guardians who believe a minor may have accessed the 7joya platform using their device are encouraged to use parental control software and to contact us immediately at [email protected] so that we can take prompt action. 7joya cooperates fully with efforts to protect minors from online gambling.

As an online platform serving players in Bangladesh, 7joya may process and store personal data on servers located in jurisdictions outside Bangladesh. Where personal data is transferred internationally — for example, to cloud infrastructure providers or game content platforms — 7joya ensures that adequate safeguards are in place to protect your data to a standard equivalent to the protections described in this Privacy Policy.

Such safeguards may include contractual data protection clauses with third-party recipients, ensuring that any recipient organisation maintains appropriate technical and organisational security measures consistent with internationally recognised data protection standards.

By using the 7joya platform, you acknowledge that your personal data may be transferred to and processed in countries outside Bangladesh as described in this section.

7joya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will update the "Last updated" date shown at the top of this page.

Where a change is particularly significant — for example, where we introduce a new category of data processing or a new type of third-party data sharing — we will also notify registered players by email or via an in-platform notification prior to the change taking effect, giving you an opportunity to review the update and, where relevant, withdraw consent if you do not agree with the new terms.

We encourage you to review this Privacy Policy periodically. Continued use of the 7joya platform following publication of an updated policy constitutes your acceptance of the revised terms.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how 7joya handles your personal information, please contact our team using the details below. All contact information is provided as plain text only:

• Email: [email protected]
• Subject line for data rights requests: "Data Rights Request – [Your Username]"
• Live Chat: Available 24 hours a day, 7 days a week via the chat widget on the 7joya website
• WhatsApp: +880 1700 000000
• Support Hours: 24/7, Bangladesh Standard Time (UTC+6)

We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 days. Where a request is complex or where a large volume of requests has been received, we may extend this period by up to an additional 60 days, in which case we will notify you of the extension and the reason for it.