add7a Privacy Policy

add7a collects personal data from players at several points in the account lifecycle — at registration, during ongoing platform use, when processing financial transactions, and when players contact our support team. The categories of data we collect are described below.

Registration and identity data collected when you create an add7a account includes:

• Full legal name as it appears on your government-issued identification;
• Date of birth (required to verify the 18+ age eligibility requirement);
• Residential address, including district, division, and postcode where applicable;
• Email address and mobile phone number used for account access and communications;
• Username and hashed password (passwords are never stored in plaintext).

Identity verification (KYC) data collected during the verification process includes:

• National Identity Card (NID) number and a copy of the NID document or passport;
• A selfie or live photograph used to confirm that the identity document belongs to the account holder;
• Proof of address documentation where requested.

Financial transaction data collected when you deposit or withdraw using bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, or card networks includes:

• Mobile wallet numbers or masked card details associated with transactions;
• Transaction reference numbers, amounts in BDT, timestamps, and processing status;
• Withdrawal destination details as provided by the player.

Platform usage data collected automatically during your sessions includes:

• IP address, device type, operating system, and browser type;
• Pages visited, games launched, betting history, session duration, and click patterns;
• Login timestamps and geographic location data derived from IP address.

Support interaction data collected when you contact the add7a support team includes:

• The content of live chat, email, and any other written communications with support agents;
• The nature of the query, resolution details, and timestamps of interactions.

add7a processes your personal data only for specific, documented purposes. The following table summarises the primary purposes for which your data is used and the legal basis for each processing activity.

add7a will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or being required to do so by applicable law. Where processing is based on your consent — in particular, marketing communications — you may withdraw that consent at any time by updating your notification preferences in your account settings or by contacting the support team.

add7a does not sell, rent, or exchange your personal data with third parties for their own commercial purposes. We share data only with the categories of recipients described below, and only to the extent necessary for each specific purpose.

Game and technology providers: add7a sources casino games and live dealer content from providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session data to deliver game content and detect technical issues. They do not receive your full identity or financial data unless required for their own regulatory compliance.

Payment processors: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard, add7a shares the minimum transaction data necessary to execute and confirm each payment. All payment processors operate under their own data protection policies and handle payment credentials directly without those credentials passing through or being stored on add7a's servers.

Identity verification services: add7a may use regulated third-party KYC and identity verification platforms to validate the accuracy of documents submitted by players. These services receive the specific documents and biometric data required to perform verification and are contractually prohibited from using that data for any other purpose.

Analytics and platform performance tools: add7a uses server-side analytics tools to monitor platform uptime, identify technical errors, and understand aggregate user behaviour patterns. These tools process usage data in anonymised or pseudonymised form wherever possible.

Legal and regulatory authorities: add7a will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by a valid legal order, warrant, or applicable law. Where permitted, add7a will notify the affected player before making such a disclosure.

add7a uses cookies and similar technologies (including local storage and session tokens) to operate the platform correctly, remember your preferences, and analyse how the platform is used. The following categories of cookies may be set when you visit add7a.net:

Most web browsers allow you to view, manage, and delete cookies through the browser's settings panel. Disabling functional or analytics cookies will not prevent you from using add7a, but may affect personalisation features and require you to re-enter certain preferences on each visit. Disabling strictly necessary or security cookies may impair your ability to log in or use the cashier.

add7a does not use third-party advertising cookies or behavioural tracking cookies for the purpose of serving targeted advertisements on external websites. Our analytics tools are configured to respect browser-level privacy signals where technically supported.

add7a retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as a general guide:

• Active account data (registration details, contact information, betting and transaction history): retained for the full duration of the account's active status plus a minimum of 5 years following account closure, in compliance with anti-money laundering record-keeping requirements;
• KYC and identity verification documents (NID copies, passport scans, selfies): retained for a minimum of 5 years from the date of verification or from the date of account closure, whichever is later;
• Financial transaction records (deposit and withdrawal logs, payment references): retained for a minimum of 5 years from each transaction date;
• Customer support records (chat transcripts, email correspondence): retained for 2 years from the date of the interaction, unless the record relates to an ongoing dispute or legal matter, in which case it is retained until resolution;
• Platform usage and analytics data (session logs, IP addresses, device identifiers): retained for up to 13 months in identifiable form, after which data is anonymised or deleted;
• Marketing consent records: retained for the duration of the consent plus 1 year following withdrawal, to demonstrate that add7a acted on a valid consent basis.

When the applicable retention period expires and no legal hold or regulatory requirement prevents deletion, add7a will securely delete or irreversibly anonymise the relevant personal data. Backups containing personal data are subject to the same retention limits and are purged on a rolling schedule consistent with the above periods.

As a data subject, you have a number of rights with respect to the personal data that add7a holds about you. These rights are summarised below. To exercise any of them, contact the add7a support team at [email protected] with the subject line "Data Rights Request" and your registered account username or email address.

• Right of access: You may request a copy of the personal data that add7a holds about you. add7a will provide a structured summary of your data within 10 Bangladesh Standard Time business days of a verified request;
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected. Corrections that affect KYC-verified fields may require re-submission of supporting documentation;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where you object to processing. Note that this right is subject to override where add7a is required to retain data under applicable law — for example, AML record-keeping obligations;
• Right to restrict processing: You may request that add7a pause the processing of your data while a dispute or correction request is being resolved;
• Right to data portability: You may request a copy of your account and transaction data in a commonly used, machine-readable format. This right applies to data provided directly by you and processed on the basis of your consent or a contract;
• Right to object to marketing: You may opt out of receiving promotional communications from add7a at any time by updating your preferences in account settings or by contacting support. Opting out of marketing does not affect the delivery of transactional account communications (e.g., deposit confirmations, security alerts);
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

add7a takes data security seriously and applies a layered set of technical and organisational controls to protect personal data against unauthorised access, loss, alteration, and disclosure. The key measures in place include:

• Transport Layer Security (TLS): All data in transit between your browser or app and the add7a platform is encrypted using current-standard TLS. Connections that do not meet the minimum encryption standard are rejected;
• Password hashing: Account passwords are stored as one-way hashed values using a modern cryptographic algorithm. add7a staff cannot retrieve or view your password in plaintext at any point;
• Two-factor authentication: Players are strongly encouraged to enable 2FA on their add7a accounts. 2FA adds a second verification step to the login process, significantly reducing the risk of unauthorised access even if login credentials are exposed;
• Access controls: Internal access to player personal data is restricted on a strict need-to-know basis. Support agents, compliance staff, and technical personnel are granted only the minimum data access required to perform their specific roles;
• Infrastructure security: add7a's servers are hosted in facilities with physical access controls, 24/7 monitoring, and network-level intrusion detection. Security patches and updates are applied on a regular, controlled schedule;
• Security monitoring: Automated systems monitor platform activity for indicators of compromise, including unusual login patterns, credential stuffing attempts, and anomalous transaction behaviour. Alerts are reviewed by the security team on a continuous basis.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to player rights, add7a will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach. Players are encouraged to maintain strong, unique passwords for their add7a accounts and to enable 2FA as an additional precaution.

add7a may update this Privacy Policy from time to time to reflect changes in our data practices, updates to applicable law, or improvements to our platform. When material changes are made, we will notify registered players via their registered email address or via a prominent notice on the add7a platform prior to the changes taking effect. The effective date shown at the top of this page will always reflect the date of the most recent revision.

Players are encouraged to review this Privacy Policy periodically to stay informed about how add7a handles personal data. Continued use of the platform following notification of a material update constitutes acceptance of the revised policy. If you do not agree with a material change, you have the right to close your account before the change takes effect by contacting support.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how your personal data is being handled, please contact the add7a data support team:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Live Chat: Available 24/7 via the add7a platform
• Response Time: 2–5 minutes via live chat; 4–12 hours via email
• Support Hours: Bangladesh Standard Time (BST, UTC+6), all days