eb7 Privacy Policy

Section 1

Data We Collect

When you register for an eb7 account, interact with the platform, contact our support team, or use any of our services, we collect information across the following categories:

1.1 Registration & Identity Data

When you create a player account on eb7, you provide us with your full legal name, date of birth, residential address (including city — such as Dhaka, Chittagong, Sylhet, or Khulna), email address, and mobile phone number. This information is used to establish your identity, create and manage your account, and fulfil our Know Your Customer (KYC) obligations under applicable regulations.

1.2 Identity Verification Documents

To complete KYC verification, we may request copies of government-issued identification documents (such as a National Identity Card, passport, or driving licence), proof of residential address (such as a utility bill or bank statement), and proof of ownership of the payment method used for deposits. These documents are processed and stored securely and are used exclusively for identity verification and fraud prevention purposes.

1.3 Financial & Transaction Data

eb7 records all financial transactions conducted through your account, including deposits, withdrawals, bonus credits, and bet placements. We capture the payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard), transaction amounts in Bangladeshi Taka (৳ BDT), timestamps, and transaction reference numbers. We do not store full payment card numbers or mobile banking PINs — this sensitive data is handled exclusively by our certified payment processing partners.

1.4 Technical & Usage Data

When you access eb7.org, our servers automatically collect certain technical data including your IP address, browser type and version, device type and operating system, referring URL, pages visited, time and duration of visits, and session activity logs. This data is collected through standard server log mechanisms and, where applicable, cookies and similar technologies (see Section 4).

1.5 Communications Data

When you contact eb7's support team — whether by email at [email protected], through the on-site support interface, or any other channel — we retain records of that correspondence including the content of messages, timestamps, and the outcome of any support enquiry. These records are retained to ensure service quality, facilitate follow-up, and provide an audit trail for complaint resolution.

Section 3

Data Sharing & Disclosure

eb7 does not sell your personal data. We share personal data with third parties only in the circumstances described below, and only to the extent necessary for the specific purpose in each case. All third-party data processors engaged by eb7 are bound by contractual data processing agreements that restrict their use of your data to the purposes for which it was shared.

Payment Processing Partners

To facilitate deposits and withdrawals, eb7 shares relevant transaction data with our payment processing partners, including the operators of bKash, Nagad, Rocket, Upay, and card scheme processors for Visa and Mastercard transactions. These partners receive only the data necessary to execute and verify the specific transaction. They are not permitted to use this data for their own marketing or profiling purposes.

Identity Verification Services

To complete KYC verification, eb7 may share identity document data with accredited third-party identity verification service providers. These providers process identity data solely for the purpose of verifying the authenticity of the documents submitted and confirming that the player meets eligibility requirements. They are contractually prohibited from retaining or processing this data beyond the scope of the verification task.

Game Content Providers

Games on the eb7 platform are supplied by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game supplied by one of these providers, certain technical data (such as session tokens and game transaction records) is transmitted to the provider's servers as part of normal game operation. eb7 ensures that all game provider integrations comply with data minimisation principles and that providers do not receive your full personal profile.

Law Enforcement & Regulatory Authorities

eb7 may disclose personal data to law enforcement agencies, regulatory bodies, or other authorities when required to do so by law, court order, or valid legal process. eb7 will, where legally permitted, notify the affected player of such disclosure. In cases involving suspected money laundering, fraud, or other criminal activity, eb7 may disclose data proactively to relevant authorities without prior notice to the player.

Section 5

Data Security

eb7 implements a multi-layered security framework to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our security measures are reviewed and updated on a regular basis to reflect evolving threats and best practices in information security.

Technical Safeguards

• TLS/SSL Encryption in Transit: All data exchanged between your browser and eb7 servers is encrypted using TLS 1.2 or higher, verified by a valid SSL certificate. Connections over plain HTTP are automatically redirected to HTTPS.
• AES-256 Encryption at Rest: Sensitive data stored in eb7 databases — including identity documents, payment details, and authentication credentials — is encrypted at rest using AES-256.
• Access Controls: Access to personal data within eb7's internal systems is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive data protection training.
• Network Security: eb7's infrastructure is protected by firewalls, intrusion detection systems, and regular penetration testing conducted by qualified security professionals.
• Two-Factor Authentication: Players are encouraged to enable 2FA on their accounts. Internal system access by eb7 staff requires multi-factor authentication.

Your Responsibility

While eb7 takes all reasonable steps to secure your data, the security of your account also depends on the strength and confidentiality of your login credentials. You are responsible for keeping your username and password secure, not sharing your credentials with any third party, and logging out of your account when using shared or public devices. If you suspect unauthorised access to your account, please contact [email protected] immediately.

Data Breach Response

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, eb7 will notify affected players without undue delay and take all reasonably practicable steps to mitigate the impact of the breach. eb7 maintains an incident response plan that is tested and updated regularly to ensure rapid containment and remediation in the event of a security incident.

Section 7

Your Privacy Rights

eb7 respects your rights in relation to your personal data. The rights described in this section apply to all players and may be exercised by contacting the eb7 support team at [email protected]. We will acknowledge all valid privacy rights requests within 5 business days and aim to provide a full response within 30 days.

Right of Access

You have the right to request a copy of the personal data eb7 holds about you. Upon receipt of a verified access request, we will provide you with a summary of the data categories held, the purposes for which they are processed, and (where applicable) the recipients to whom they have been disclosed. Identity verification may be required before we release data to protect against unauthorised disclosure.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Many data fields (such as contact details and address) can be updated directly through your account profile. For corrections to identity-related data, supporting documentation may be required.

Right to Erasure

You may request that eb7 delete your personal data. We will fulfil erasure requests where we no longer have a lawful basis to retain the data in question. Please note that certain data — particularly that which is subject to regulatory retention obligations under AML and KYC frameworks — cannot be erased prior to the expiry of the mandatory retention period, even following account closure.

Right to Restrict Processing

In certain circumstances — for example, where you dispute the accuracy of data we hold, or where you believe processing is unlawful but prefer restriction over erasure — you may request that we restrict the processing of your personal data pending resolution of the relevant matter.

Right to Object

You have the right to object to processing of your personal data where that processing is based on eb7's legitimate interests. You also have an unconditional right to object to the processing of your data for direct marketing purposes at any time. Upon receipt of a valid objection to marketing, we will cease processing your data for that purpose immediately.