c7cc Privacy
Policy

Introduction

c7cc ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all players and visitors who interact with our platform at c7cc.io. This Privacy Policy describes how c7cc collects, processes, stores, shares, and safeguards personal information in connection with the services we provide — including sports betting, live casino, slots, virtual sports, and account management — to players based primarily in Bangladesh.

This Privacy Policy is incorporated by reference into our Terms & Conditions and should be read alongside that document. By registering an account on c7cc, making a deposit, or using any feature of the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

c7cc operates as the data controller for personal data collected directly through the Platform. Where data is processed by third-party service providers acting on our behalf, those providers act as data processors and are contractually bound to handle your data only for the purposes specified by c7cc and in accordance with appropriate data protection standards.

Personal Data We Collect

c7cc collects several categories of personal data. The specific data collected depends on the nature of your interaction with the Platform. Below is a comprehensive breakdown of the data categories we may hold about you:

2.1 Identity & Contact Data

• Full legal name as provided during account registration or KYC verification.
• Date of birth — collected to verify that you meet the 21+ age requirement for using the Platform.
• Residential address including city, district, and postcode within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi).
• Email address used to communicate account notifications, promotions, and support responses.
• Bangladesh mobile phone number linked to your account and used for MFS transactions and two-factor authentication where applicable.
• Government-issued identification documents submitted during KYC — this may include a National Identity Card (NID), passport, or birth certificate. Document images and extracted data are stored securely.

2.2 Financial & Transaction Data

• MFS wallet identifiers (bKash, Nagad, Rocket, Upay account numbers) used to process deposits and withdrawals. Full wallet numbers may be partially masked in stored records.
• Transaction history — a complete record of all deposits, withdrawals, bonuses credited, bets placed, winnings received, and account balance adjustments.
• Deposit and withdrawal amounts in Bangladeshi Taka (BDT), together with timestamps and transaction reference numbers.
• Bonus and promotional activity — records of all bonuses claimed, wagering requirement progress, and bonus expiry events.

2.3 Betting & Gaming Activity Data

• A full record of all bets placed, including sport or game type, event, market, stake amount, odds, and settlement outcome.
• Casino game session data — game title, provider, session start/end times, bets placed per round, and winnings/losses per session.
• Betting patterns and preferences inferred from your activity — used for responsible gaming monitoring and, where you have consented, for personalised promotional offers.

2.4 Technical & Usage Data

• IP address — collected on login, registration, and transaction events for security, fraud prevention, and geographic restriction enforcement.
• Device information including device type, operating system, browser type and version, and screen resolution.
• Session data — login timestamps, session duration, pages visited, features used, and click-path data.
• Cookie and tracking data — as described in Section 7 of this Privacy Policy.

2.5 Communications Data

• Records of all customer support interactions including live chat transcripts, support tickets, and email correspondence with [email protected].
• Feedback and survey responses submitted voluntarily by players.
• Complaints and dispute records maintained for regulatory and audit purposes.

c7cc does not collect sensitive personal data beyond what is strictly required for age verification and identity checks. We do not collect racial or ethnic origin data, political opinions, religious beliefs, health data, or biometric data beyond what may appear incidentally on a government-issued ID document submitted for KYC.

How We Collect Your Data

c7cc collects personal data through the following mechanisms:

3.1 Direct Collection

The majority of personal data we hold is provided directly by you during the following interactions:

• Account registration — when you create your c7cc account and submit your name, date of birth, contact details, and mobile number.
• KYC verification — when you submit identity documents to complete the verification process required before processing withdrawals or activating certain account features.
• Deposits and withdrawals — when you initiate a financial transaction using bKash, Nagad, Rocket, or Upay, your MFS wallet details and transaction data are recorded.
• Customer support — when you contact our team via live chat or email, the content of your communications and any data you provide is retained.
• Promotional participation — when you opt into promotions, enter tournaments, or claim bonuses, relevant activity data is recorded.

3.2 Automated Collection

Certain technical data is collected automatically when you visit or interact with the Platform:

• Server logs — our servers automatically record your IP address, request type, page requested, referrer URL, browser type, and timestamp for every HTTP request made to c7cc.io.
• Cookies and local storage — small data files placed on your device that retain session state, authentication tokens, and user preferences. See Section 7 for full details.
• Analytics tracking — aggregated, anonymised usage data collected to understand how the Platform is used and to improve user experience.

3.3 Third-Party Sources

In limited circumstances, c7cc may receive data about you from third-party sources, including:

• Identity verification partners — third-party KYC service providers may return verification results and risk scores based on the documents you submit.
• Payment processors — MFS providers may return transaction confirmation data, wallet status, and fraud flags associated with specific transactions.
• Fraud and risk intelligence services — third-party fraud detection tools may cross-reference your registration data against known fraud databases to protect the integrity of the Platform.

How We Use Your Personal Data

c7cc uses the personal data it collects strictly for the following purposes. We do not use your data in ways that are incompatible with these stated purposes without first seeking your explicit consent.

Legal Basis for Processing

c7cc processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing is necessary to fulfil the contract between c7cc and you as a registered player — specifically, to provide betting and gaming services, process transactions, and manage your account.
• Legal obligation: Processing is required to comply with applicable legal and regulatory requirements, including age verification, anti-money laundering (AML) obligations, and fraud prevention duties.
• Legitimate interests: Processing is necessary for c7cc's legitimate interests in operating a secure, fraud-free platform, improving our services, and maintaining fair play for all users — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is not covered by the above bases — for example, sending you marketing communications or processing optional profile data — c7cc relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing & Disclosure

c7cc does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We may share your data only in the limited circumstances described below:

6.1 Service Providers & Data Processors

c7cc works with a small number of trusted third-party service providers who process data on our behalf in order to deliver Platform functionality. These include:

• Identity verification partners — to perform KYC checks and validate identity documents submitted by players.
• Payment processing partners — MFS gateway providers that facilitate deposit and withdrawal transactions via bKash, Nagad, Rocket, and Upay.
• Game content providers — studios such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Hacksaw Gaming, and Spribe may receive session-level technical data necessary to deliver their games. These providers do not receive your full personal profile.
• Cloud hosting and infrastructure providers — the servers and databases on which the c7cc Platform and its data are hosted.
• Fraud prevention and risk analytics providers — tools that analyse transaction and behavioural patterns to detect and prevent fraudulent activity.

All third-party processors are bound by contractual data processing agreements that require them to process your data only on c7cc's instructions, to maintain appropriate security standards, and to prohibit onward transfer of your data without c7cc's written consent.

6.2 Legal & Regulatory Disclosure

c7cc may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where we are legally required to do so, where disclosure is necessary to prevent or detect criminal activity, or where disclosure is required to protect the vital interests of any person. c7cc will, wherever permitted by law, notify affected players of any such mandatory disclosure request.

6.3 Business Transfers

In the event that c7cc undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, player personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, c7cc will take reasonable steps to ensure that your privacy rights continue to be protected and will notify affected players prior to any transfer where practically possible.

Cookies & Tracking Technologies

c7cc uses cookies and similar tracking technologies to ensure the Platform functions correctly, to enhance your experience, and to analyse usage patterns. A cookie is a small text file placed on your device by a website. The following categories of cookies are used on c7cc.io:

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to refuse non-essential cookies, delete existing cookies, or receive a warning before a cookie is placed. Please note that disabling strictly necessary cookies will impair your ability to use core Platform features including account login and deposit functionality.

Data Security

c7cc implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security infrastructure includes, but is not limited to, the following measures:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and c7cc servers, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encrypted database storage for sensitive data fields including identity document images, payment identifiers, and authentication credentials. Passwords are stored using industry-standard one-way hashing algorithms and are never stored in plain text.
• Access controls and role-based permissions ensuring that only authorised c7cc personnel with a legitimate business need can access specific categories of personal data.
• Regular security audits and penetration testing conducted to identify and remediate vulnerabilities in the Platform infrastructure before they can be exploited.
• Fraud detection and anomaly monitoring systems that operate continuously to identify unusual account activity, suspicious login patterns, and potential data breaches.
• Incident response procedures — in the unlikely event of a data breach that affects your personal data, c7cc will notify affected players and take all required remediation steps as promptly as practicable.

Data Retention

c7cc retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce our agreements. The following general retention periods apply:

• Active account data — retained for the full duration of your account's active status plus a minimum of five (5) years following account closure, in line with anti-money laundering record-keeping obligations.
• KYC and identity documents — retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Transaction records — retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping requirements.
• Customer support communications — retained for a minimum of two (2) years from the date of the last interaction, or longer where a complaint or dispute remains unresolved.
• Marketing consent records — retained for the duration of your consent and for a period of one (1) year following withdrawal of consent to demonstrate compliance.
• Server logs and technical data — typically retained for 90 days for security monitoring purposes, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to you as an individual. Where data is anonymised rather than deleted, it may be retained indefinitely for statistical and analytical purposes without restriction.

Your Data Rights

As a player whose personal data is processed by c7cc, you hold the following rights in relation to your information. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all valid requests within a reasonable timeframe, and in any case within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data c7cc holds about you, along with information about how it is used and with whom it has been shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may also update certain information directly within your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request that c7cc delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing and no overriding legitimate grounds exist. Note that certain data must be retained to comply with legal obligations and this right is subject to those requirements.
• Right to Restriction of Processing: You may request that c7cc restrict the processing of your data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: You have the right to receive certain personal data you have provided to c7cc in a structured, machine-readable format and to request that it be transferred to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on c7cc's legitimate interests. You also have an absolute right to object to your data being used for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to your withdrawal.

c7cc will never discriminate against you or restrict your access to Platform services as a result of you exercising any of the above rights. If you are dissatisfied with how c7cc handles your personal data or your rights request, you have the right to raise a complaint with an appropriate data protection authority.

Third-Party Links & Services

The c7cc Platform may contain references to or integrations with third-party services, including game providers (Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe) whose game content is embedded within the c7cc interface. While c7cc takes reasonable steps to select reputable and trustworthy third-party partners, we are not responsible for the privacy practices or the content of any third-party service.

When you interact with an embedded third-party game or service, that provider may collect technical session data directly from your device in accordance with their own privacy policies. c7cc encourages you to review the privacy policies of any third-party provider whose services you use through or alongside the Platform.

This Privacy Policy applies solely to data processed by c7cc as the data controller. It does not govern the data practices of any third-party entity, even where that entity provides services accessible through c7cc.io.

Children & Minors

If you are a parent or guardian and believe that a person under your care may have registered on the c7cc Platform or submitted personal data to us, please contact [email protected] immediately with full details so that we can take appropriate action without delay.

c7cc employs active age verification controls as part of the registration and KYC process to prevent underage access. However, no system is completely foolproof. We rely on the accuracy of information provided during registration and encourage responsible adults to use parental controls and internet filtering tools to prevent minors from accessing online gambling platforms.

Changes to This Privacy Policy

c7cc reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or Platform functionality. When we make material changes to this Policy, we will notify registered players by posting a prominent notice on the Platform and, where appropriate, by sending a notification to the email address associated with your account.

The revised Privacy Policy will take effect from the date indicated in the "Last updated" notice at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how c7cc protects your personal data. Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

Where a change to this Privacy Policy requires your fresh consent — for example, where we propose to use your data for a new purpose that is materially different from the purposes described at the time of collection — we will seek your explicit consent before proceeding with that new processing activity.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way c7cc handles your personal data, please do not hesitate to get in touch with our support team using the contact details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

• Email: [email protected] — Please include "Privacy Request" in the subject line for all data rights requests so we can route your enquiry to the correct team member.
• Live Chat: Available 24/7 inside your c7cc account dashboard. Our support agents are available around the clock (Bangladesh Standard Time, UTC+6).
• Response Time: We aim to acknowledge all privacy-related requests within 48 hours and to provide a full response within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days and will notify you accordingly.