700bdt Privacy Policy – How We Protect Your Personal Data

1.1 — Registration Data

When you open a 700bdt account, we collect the following information:

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Mobile phone number registered in Bangladesh
• Residential address (city, district, division)
• Username and hashed password
• Email address (where provided voluntarily)

1.2 — Identity Verification Data

To comply with know-your-customer (KYC) obligations and to protect against fraud, 700bdt may request copies of government-issued identity documents, including a National Identity Card (NID), passport, or birth certificate. Biometric data embedded in such documents is used solely for verification and is not stored separately or processed for any other purpose.

1.3 — Financial Transaction Data

We record details of every deposit, withdrawal, bonus credit, and wager placed on the Platform. This includes transaction amounts in BDT (৳), timestamps, payment method references (e.g., bKash wallet numbers, Nagad references, Rocket account identifiers), and transaction status. Full payment credentials such as full mobile banking PINs are never stored by 700bdt.

1.4 — Device and Technical Data

When you access the 700bdt Platform, our servers automatically collect certain technical information, including:

• IP address and approximate geographic location derived from it
• Device type, operating system, and browser version
• Session start and end timestamps
• Pages visited and features interacted with during each session
• Referral source (if you arrived via a tracked link)

This technical data is used for Platform security monitoring, fraud prevention, and aggregate analytics. It is not used to build individual advertising profiles.

1.5 — Communications Data

If you contact 700bdt through our support channel, we retain a record of those communications, including the date, content of the inquiry, and the resolution provided. This allows us to maintain service quality and to refer back to prior interactions if a dispute arises.

1.6 — Cookies and Similar Technologies

700bdt uses session cookies and persistent cookies to maintain your login state, remember your preferences, and measure Platform performance. We do not use third-party advertising cookies. You may configure your browser to reject cookies, but doing so may impair the functionality of certain Platform features, including the login session and bet slip persistence.

3.1 — Service Providers

700bdt engages a limited number of third-party service providers who process personal data on our behalf. These include payment gateway operators (bKash, Nagad, Rocket), game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), and Platform infrastructure providers. Each service provider is bound by a data processing agreement that prohibits them from using your data for any purpose other than delivering the contracted service to 700bdt.

3.2 — Legal and Regulatory Disclosure

700bdt may disclose your personal data to law enforcement agencies, regulatory authorities, or judicial bodies when required to do so by applicable law, court order, or in response to a lawful government request. We will, where legally permissible, notify you of such a disclosure.

3.3 — Business Transfers

In the event that 700bdt undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer by a prominent notice on the Platform at least fourteen (14) days prior to the transfer taking effect, and the successor will be bound by the terms of this Policy.

3.4 — No Sale of Data

For the avoidance of doubt, 700bdt does not and will not sell, rent, or licence your personal information to any third party for independent marketing, profiling, or commercial exploitation purposes. This prohibition is absolute and applies regardless of the commercial value of the data.

4.1 — Encryption in Transit and at Rest

All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher. Sensitive data fields stored in our databases — including identity document references and financial records — are encrypted at rest using AES-256 encryption. Passwords are never stored in plaintext; they are processed using a one-way cryptographic hashing algorithm with salting.

4.2 — Access Controls

Access to systems containing personal data is restricted on a strict need-to-know basis. Internal staff access is governed by role-based access controls, multi-factor authentication requirements, and comprehensive audit logging. Access rights are reviewed on a regular basis and revoked promptly upon a change in employment status or role.

4.3 — Incident Response

700bdt maintains a documented data breach response procedure. In the event of a security incident that is reasonably likely to result in a risk to the rights or interests of affected players, 700bdt will notify impacted users without undue delay via the contact details registered on their account. The notification will describe the nature of the incident, the categories of data affected, and the steps 700bdt has taken or will take to address it.

5.1 — Active Accounts

Personal data associated with an active 700bdt account is retained for the duration of the account's existence on the Platform and for a minimum of five (5) years following permanent account closure. This retention period supports our obligation to maintain auditable financial records and to respond to regulatory inquiries.

5.2 — Self-Excluded Accounts

Where a player has requested self-exclusion, their account data is retained for the full duration of the exclusion period and for five (5) years thereafter. This ensures that self-exclusion preferences can be re-applied in the event the player attempts to open a new account during the exclusion window.

5.3 — Deletion Requests

You may request deletion of your personal data by submitting a written request to [email protected]. 700bdt will honour deletion requests to the extent permitted by law. Note that certain categories of data — particularly financial transaction records — must be retained for the minimum statutory period regardless of a deletion request, and will be securely isolated from active processing during the retention period.

6.1 — Right to Access

You have the right to obtain confirmation of whether 700bdt processes personal data about you and, if so, to receive a copy of that data along with information about how it is being used. We will respond to access requests within thirty (30) days of receipt.

6.2 — Right to Rectification

If the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You may update basic account details (such as your mobile number) directly through your account settings. For changes to identity-verified fields, a support request is required.

6.3 — Right to Erasure

Subject to our legal retention obligations, you have the right to request the deletion of your personal data. We will assess each erasure request on its merits and will inform you of the outcome and of any data categories that must be retained to satisfy a legal obligation.

6.4 — Right to Withdraw Consent

Where processing is based on your consent (for example, receipt of promotional communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

6.5 — Right to Object

You have the right to object to the processing of your personal data for purposes that are not strictly necessary for the performance of your account agreement or for our compliance with legal obligations. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

8.1 — Notification of Changes

700bdt reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will display a prominent notice on the Platform for a minimum of seven (7) days prior to the changes taking effect. The "Last updated" date at the top of this page will be revised accordingly. We encourage you to review this Policy periodically to stay informed about how we protect your data.

8.2 — Continued Use as Acceptance

Your continued use of the 700bdt Platform following the effective date of a revised Privacy Policy constitutes your acknowledgement of, and agreement to, the changes. If you do not accept the revised Policy, you must stop using the Platform and may request account closure by contacting [email protected].

8.3 — Contact for Privacy Enquiries

For any questions, concerns, or formal requests relating to this Privacy Policy or to the processing of your personal data by 700bdt, please contact us at: [email protected]. All privacy correspondence is handled in English. We target an initial acknowledgement within two (2) business days and a full response within thirty (30) days, measured in Bangladesh Standard Time (BST, UTC+6).