c7c Privacy Policy

📄 Full Privacy Policy

1. Data Controller

c7c is the data controller responsible for your personal information. This means we determine the purposes and means by which your personal data is processed. For all data-related enquiries, including requests to exercise your data subject rights, please contact our support team at [email protected] (plain text — not a clickable link).

2. Lawful Basis for Processing

c7c processes your personal data on one or more of the following lawful bases:

• Contract performance: Processing that is necessary to fulfil the agreement between you and c7c when you create an account and use the platform, including processing deposits, withdrawals, and wagers.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) requirements, know-your-customer (KYC) obligations, and fraud prevention duties.
• Legitimate interests: Processing necessary for our legitimate business interests, such as fraud detection, platform security monitoring, and product improvement — provided those interests are not overridden by your rights and interests.
• Consent: Where we have asked for and received your consent for a specific processing activity, such as sending promotional communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

3. How We Use Your Personal Data

c7c uses the personal data we collect for the following specific purposes:

• Creating and managing your account on the c7c platform.
• Verifying your identity to satisfy regulatory and security requirements.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, and Upay.
• Detecting and preventing fraud, money laundering, collusion, and other prohibited activities.
• Providing customer support and resolving account disputes.
• Administering bonuses, promotions, and loyalty programmes.
• Personalising your experience on the platform based on your usage patterns and preferences.
• Sending transactional communications such as deposit confirmations, withdrawal notifications, and account alerts.
• Sending promotional communications where you have consented to receive them (you may opt out at any time).
• Analysing aggregate, anonymised usage data to improve platform performance and user experience.
• Maintaining records required by applicable law.

4. Sharing Your Personal Data

c7c does not sell, rent, or trade your personal data. We may share your data with carefully selected third parties only in the following circumstances:

• Payment processors: bKash, Nagad, Rocket, and Upay receive transaction data strictly necessary to process your deposits and withdrawals. Each processor operates under its own privacy policy and regulatory framework.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified studios may receive your session identifier and wager data for game functionality and fair-play auditing purposes. No additional personal data is shared.
• Identity verification services: Where a third-party KYC provider is engaged to assist with document verification, only the minimum necessary data is shared and the provider is contractually bound to process it solely for that purpose.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by applicable law or a valid legal order. We will notify you of such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of c7c's business, your personal data may be transferred to the acquiring entity. You will be notified in advance of any such transfer and of any changes to this Privacy Policy that result from it.

5. Cookies and Tracking Technologies

c7c uses the following types of cookies on the platform:

• Strictly necessary cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit. They cannot be disabled without impairing your ability to use the site.
• Preference cookies: Remember your settings such as language preference and responsible gaming display options.
• Analytics cookies: Collect anonymised data about how users interact with the platform — for example, which pages are visited most frequently and where users encounter errors. This data is aggregated and cannot be used to identify you individually.

We do not use advertising cookies, behavioural tracking cookies, or any technology that tracks your activity across websites other than c7c. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies will affect your ability to use the platform.

6. Data Retention

c7c retains your personal data for as long as your account remains active and for a further period thereafter as required by applicable law. The following retention principles apply:

• Account registration and identity verification data is retained for a minimum of five years following account closure, in accordance with AML and KYC regulatory requirements.
• Transaction records are retained for a minimum of five years from the date of each transaction.
• Support communications are retained for two years from the date of the last message in a conversation thread.
• Technical logs (IP addresses, session data) are retained for a maximum of 12 months unless a longer period is required for an active fraud or security investigation.
• Where data is no longer required for any lawful purpose, it is securely deleted or anonymised.

7. Data Security

c7c implements robust technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security controls include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption at rest for sensitive data fields including passwords (stored as salted bcrypt hashes) and identity document copies.
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access personal data.
• Regular independent security assessments and penetration testing of the platform.
• Automated fraud detection systems that monitor account activity in real time for signs of unauthorised access.

Despite these measures, no online system is completely immune to security risks. In the event of a data breach that poses a risk to your rights and interests, c7c will notify affected users promptly and take all reasonable steps to contain and remediate the incident.

8. Your Rights as a Data Subject

As a user of the c7c platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact [email protected] (plain text — not a clickable link) with the subject line "Data Rights Request" and a clear description of your request:

• Right of access: Request a copy of the personal data c7c holds about you.
• Right to rectification: Ask us to correct inaccurate or incomplete personal data.
• Right to erasure: Request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restriction: Ask us to pause the processing of your data in certain circumstances, for example while a dispute over accuracy is being resolved.
• Right to data portability: Request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to object: Object to the processing of your personal data where we rely on legitimate interests as our lawful basis. We will honour your objection unless we have compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

We will respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or numerous, we may extend this period by a further 60 days and will notify you accordingly.

9. Children and Minors

The c7c platform is strictly for individuals aged 21 and above. We do not knowingly collect personal data from anyone under the age of 21. If we discover that a user under 21 has created an account and provided personal data, we will immediately close the account, delete the associated personal data, and — where legally required — report the incident to the relevant authority. If you believe a minor has registered on c7c, please notify us immediately at [email protected].

10. International Data Transfers

c7c's primary operations are directed at users in Bangladesh. Where personal data is transferred to third-party service providers located outside Bangladesh — for example, international game studios or cloud infrastructure providers — we take steps to ensure that appropriate safeguards are in place, including contractual protections consistent with recognised data protection standards. We will not transfer your data to a jurisdiction that does not offer an adequate level of protection without your explicit consent or a valid legal basis.

11. Third-Party Links

The c7c platform does not contain links to third-party websites for general browsing. Any third-party game content displayed within the platform is embedded and subject to the relevant game provider's own terms. c7c is not responsible for the privacy practices of third-party game providers in respect of any data you may independently share with them.

12. Changes to This Privacy Policy

c7c reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify registered users via an on-platform notification and update the "Last Updated" date at the top of this document. Your continued use of the platform following notification of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how we protect your data.

13. Contact Us

For all privacy-related enquiries, data rights requests, or complaints, please contact the c7c data team. We are committed to addressing all privacy concerns promptly and transparently.

Email: [email protected] (plain text — not a clickable link)

Our support team operates 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6). All privacy correspondence is treated as strictly confidential.