Privacy Policy — p7ppp

1 Information We Collect

p7ppp collects personal data through a number of channels during your use of the platform. The categories of data we collect, and the circumstances under which we collect them, are described in full below.

1.1 Account Registration Data

When you create a p7ppp account, we collect the following information:

• Full legal name
• Date of birth (to verify you are aged 18 or older)
• Email address
• Mobile phone number
• Residential address (city, district, country — Bangladesh players are not required to submit a full postal address at registration, though this may be required at the KYC stage)
• Username and hashed password (passwords are never stored in plain text)

1.2 Identity Verification (KYC) Data

To comply with anti-money-laundering obligations and to confirm that players are aged 18 or above, p7ppp may request one or more of the following documents:

• Government-issued National Identity Card (NID)
• Valid passport
• Valid driving licence
• Utility bill or bank statement (as proof of address, dated within the last three months)
• Photograph of the payment method (e.g., a bKash or Nagad wallet screenshot confirming ownership)

KYC documents are used solely for verification purposes. They are not shared with third parties except where legally required or where the data processor is a contracted KYC/AML service provider operating under a data processing agreement with p7ppp.

1.3 Financial Transaction Data

Each deposit and withdrawal you make generates a transaction record. We retain the following financial data:

• Payment method type (bKash, Nagad, Rocket, Upay, USDT, BTC, Visa, Mastercard)
• Transaction reference numbers
• Deposit and withdrawal amounts in BDT equivalent
• Transaction timestamps
• Wallet addresses (for cryptocurrency transactions)

We do not store full card numbers. Card payments are processed via PCI-DSS compliant third-party payment gateways, and p7ppp only retains tokenised card references.

1.4 Device and Technical Data

When you access p7ppp via a web browser or mobile device, we automatically collect certain technical data, including:

• IP address and approximate geolocation (country and city level)
• Browser type, version, and operating system
• Device type (desktop, tablet, mobile) and screen resolution
• Pages visited, time on page, and navigation path through the platform
• Session start and end timestamps
• Referral source (the URL from which you arrived at p7ppp, if applicable)

1.5 Communications Data

If you contact p7ppp via live chat, email, or any other support channel, we retain the content of those communications for quality assurance, dispute resolution, and regulatory compliance purposes. This includes live chat transcripts, emails sent to [email protected], and any attachments you submit.

1.6 Gameplay Data

We record all gameplay activity on your account, including games played, bet amounts, win/loss outcomes, bonus usage, wagering progress, and session duration. This data is used for account management, bonus administration, responsible gaming monitoring, and fraud detection.

2 How We Use Your Data

p7ppp processes your personal data only for the purposes set out below. We rely on one or more lawful bases for each processing activity, as indicated.

Purpose	Data Used	Lawful Basis
Creating and managing your player account	Registration data, device data	Contract performance
Age and identity verification (KYC)	KYC documents, registration data	Legal obligation
Processing deposits and withdrawals	Financial transaction data, KYC data	Contract performance
Fraud detection and prevention	Device data, financial data, gameplay data	Legitimate interest
Responsible gaming monitoring	Gameplay data, session data	Legal obligation / Legitimate interest
Customer support and dispute resolution	Communications data, account data	Contract performance / Legitimate interest
Sending transactional emails (deposits, withdrawals, security alerts)	Email address, transaction data	Contract performance
Sending promotional communications (if opted in)	Email address, gameplay preferences	Consent
Platform analytics and improvement	Device data, navigation data	Legitimate interest
Legal and regulatory compliance	All categories as required	Legal obligation

2.1 Marketing Communications

p7ppp will only send promotional emails, SMS messages, or push notifications to players who have explicitly opted in to receive marketing communications at the time of registration or via the account preferences panel. You may withdraw your marketing consent at any time by updating your communication preferences within your account dashboard or by contacting [email protected]. Withdrawal of marketing consent does not affect your ability to use the platform or receive essential transactional communications.

2.2 Automated Decision-Making

p7ppp uses automated systems to flag accounts for fraud review, responsible gaming intervention, and bonus abuse detection. These systems generate alerts that are subsequently reviewed by human staff before any material action (such as account suspension or bonus forfeiture) is taken. We do not make wholly automated decisions that produce significant legal effects for players without human review.

3 Data Sharing and Disclosure

p7ppp does not sell, rent, or trade your personal data to third parties. We share your data only in the limited circumstances described in this section, and only to the extent necessary for the stated purpose.

3.1 Service Providers and Data Processors

We engage trusted third-party service providers who process data on our behalf under contractual data processing agreements. These providers include:

• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified studios. These providers receive minimal session tokens to authenticate game rounds; they do not receive your full personal profile.
• Payment processors: Licensed payment gateway operators who facilitate bKash, Nagad, Rocket, Upay, Visa, and Mastercard transactions. They receive only the data necessary to complete the payment.
• KYC and identity verification providers: Contracted compliance technology providers who assist with document verification. All such providers operate under strict confidentiality obligations.
• Cloud infrastructure providers: Our hosting and database infrastructure runs on enterprise-grade cloud providers with data residency controls. Personal data is not unnecessarily transferred to servers in jurisdictions without adequate data protection standards.
• Analytics providers: We use privacy-respecting analytics tools to understand platform usage. Analytics data is aggregated and does not identify individual players where technically avoidable.

3.2 Legal and Regulatory Disclosure

p7ppp may be required to disclose personal data to competent authorities, law enforcement agencies, financial intelligence units, or courts where we are legally compelled to do so. Such disclosures are made only to the extent required and are not subject to player consent, given their legal necessity. Where permitted by law, we will notify the affected player that a disclosure has been made.

3.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of substantially all of our assets, your personal data may be transferred to the successor entity as part of that transaction. We will take reasonable steps to notify affected players and to ensure that the successor entity upholds data protection standards consistent with this Privacy Policy.

3.4 What We Do Not Share

We do not share your personal data with:

• Advertising networks or data brokers for targeted advertising
• Social media platforms for retargeting purposes
• Other players or members of the public
• Any affiliate partner beyond the minimum session data required to attribute a registration or deposit

4 Cookies and Tracking Technologies

p7ppp uses cookies and similar technologies (such as local storage and session tokens) to keep the platform functioning correctly, to remember your preferences, and to gather anonymised analytics data. This section explains what cookies we use and the purpose of each.

4.1 Strictly Necessary Cookies

These cookies are essential for the platform to function and cannot be disabled without breaking core features such as login sessions, game loading, and deposit/withdrawal flows. They do not collect data used for marketing. Examples include:

• Session authentication tokens (keeps you logged in during your visit)
• Security cookies (CSRF protection tokens to prevent cross-site request forgery)
• Load-balancing cookies (ensures your session is routed to the correct server)

4.2 Functional Cookies

Functional cookies allow the platform to remember choices you make (such as your preferred language, currency display, or notification settings) so you do not have to re-configure them on each visit. These cookies persist across sessions and are stored on your device.

4.3 Analytics Cookies

We use analytics cookies to understand how players navigate p7ppp — which pages are visited most, where users drop off, and how features are being used. This data is aggregated and anonymised wherever possible. Analytics cookies help us improve the platform experience for all players.

4.4 Managing Cookies

You can control cookie behaviour through your browser settings. Most modern browsers allow you to block or delete cookies, or to receive a notification before a cookie is set. Please note that disabling strictly necessary cookies will prevent you from accessing your account and using the platform. Instructions for managing cookies in commonly used browsers are available in each browser's official help documentation.

5 Data Security and Retention

5.1 Security Measures

p7ppp implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption: All data in transit between your browser or app and our servers is encrypted using TLS 1.2 or higher.
• Data encryption at rest: Sensitive personal data stored in our databases (including KYC documents and financial records) is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data undergo data protection training and are bound by confidentiality obligations.
• Two-factor authentication: Players are encouraged to enable two-factor authentication (2FA) on their accounts via the security settings panel. Staff accounts with access to player data require 2FA as a mandatory control.
• Intrusion detection: Our infrastructure is monitored 24/7 for suspicious activity. Security incident response procedures are in place and regularly tested.
• Penetration testing: We conduct periodic security assessments of our platform infrastructure to identify and remediate vulnerabilities before they can be exploited.

5.2 Data Retention Periods

We retain personal data for the following periods, after which it is securely deleted or irreversibly anonymised:

Data Category	Retention Period	Basis
Account registration data	Duration of account + 5 years after closure	Legal / AML obligation
KYC identity documents	5 years from date of submission	Legal / AML obligation
Financial transaction records	7 years from transaction date	Legal / Financial regulation
Gameplay and betting records	5 years from last activity	Legitimate interest / Legal obligation
Support communications	3 years from last communication	Legitimate interest / Dispute resolution
Marketing consent records	Until consent is withdrawn + 3 years	Legal obligation (consent record)
Analytics / device data	13 months (rolling)	Legitimate interest

5.3 Data Breach Notification

In the unlikely event of a personal data breach that poses a significant risk to affected players, p7ppp will notify affected individuals without undue delay. Notifications will be sent to the registered email address on file and will include a description of the breach, the categories of data affected, the likely consequences, and the steps p7ppp has taken or is taking in response.

6 Your Privacy Rights

As a p7ppp player, you hold meaningful rights over your personal data. We are committed to honouring these rights promptly and transparently. To exercise any of the rights described below, contact us at [email protected] with the subject line "Data Rights Request" and specify which right you wish to exercise.

6.1 Right of Access

You have the right to request a copy of all personal data p7ppp holds about you. Upon a valid request, we will provide a structured, commonly used, machine-readable copy of your data within 30 days. We may request proof of identity before fulfilling an access request to protect against unauthorised disclosure.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Minor account details (such as contact number or residential address) can typically be updated directly within your account profile. More substantial corrections (such as a name change supported by a legal document) should be submitted to [email protected].

6.3 Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected and there is no overriding legal obligation to retain it. Please note that we are required by financial and AML regulations to retain certain transaction and KYC records for a minimum of five to seven years; erasure of these records cannot be accommodated during the mandatory retention period even upon request.

6.4 Right to Restriction of Processing

You may request that p7ppp restrict the processing of your personal data in circumstances where you contest its accuracy, where processing is unlawful, or where you have objected to processing pending verification of legitimate grounds. During a restriction, we will continue to store your data but will pause active processing activities not required by law.

6.5 Right to Data Portability

Where processing is based on your consent or on contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) and to transmit that data to another controller.

6.6 Right to Object

You have the right to object to the processing of your personal data where that processing is based on legitimate interests. Upon an objection, p7ppp will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise, or defence of legal claims.

6.7 Right to Withdraw Consent

Where processing is based on your consent (for example, marketing communications), you have the right to withdraw that consent at any time without detriment. Withdrawing consent does not affect the lawfulness of processing carried out prior to the withdrawal.

7 Third-Party Services and Links

p7ppp integrates third-party game content from certified providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers operate their own embedded game environments within the p7ppp platform. While p7ppp takes care to partner only with certified and reputable providers, each provider operates under its own privacy policy with respect to data generated within game sessions.

7.1 Game Provider Data Processing

When you launch a game from a third-party provider, a session token is passed to that provider's game servers to authenticate the round. The provider records bet amounts, game outcomes, and session duration for the purposes of game integrity, audit trails, and RNG certification. This data remains within the provider's systems and is governed by their data processing policies. p7ppp receives aggregated game round results to update your account balance and gameplay records.

7.2 Payment Gateway Data Processing

Payment transactions processed via bKash, Nagad, Rocket, Upay, Visa, and Mastercard are handled by licensed payment gateway operators. These operators are independent data controllers in respect of the payment transaction data they process. p7ppp retains only transaction reference numbers and confirmation statuses — not full payment credentials. For details on how your payment provider handles your data, please refer to the relevant provider's own privacy documentation.

7.3 No Responsibility for External Sites

This Privacy Policy applies solely to data processed by p7ppp at https://p7ppp.app. If you navigate away from our platform to any external website, including payment provider portals or game provider websites, the privacy practices of those third-party sites are entirely outside our control and responsibility. We encourage you to review the privacy policies of any third-party service before submitting personal data to them.

8 Updates to This Privacy Policy

p7ppp reserves the right to update or revise this Privacy Policy at any time in response to changes in applicable law, changes in our data processing practices, or improvements to the platform. When material changes are made, we will post a prominent notice on the p7ppp homepage and update the "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically to remain informed of how we are protecting your data. Your continued use of p7ppp following any update to this Privacy Policy constitutes your acknowledgement of the revised terms. Where a material change affects your rights in a significant way, we will make reasonable efforts to notify you directly via your registered email address.

8.1 Contact Us About Privacy

If you have any questions, concerns, or complaints about this Privacy Policy or about how p7ppp handles your personal data, please contact our support team:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the platform
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

We aim to acknowledge all privacy-related enquiries within 2 business days and to provide a full response within 30 calendar days of receipt.