Your Privacy at wj7

01 What Personal Data We Collect

wj7 collects personal data in the following categories. The specific data points collected depend on the features you use and the stage of your account lifecycle.

wj7 does not knowingly collect sensitive personal data beyond what is strictly required for identity verification and compliance purposes. Sensitive data such as racial or ethnic origin, political opinions, religious beliefs, and health data is not collected or processed by wj7 for any purpose.

02 How We Collect Your Personal Data

wj7 collects personal data through the following channels:

• Direct collection: Data you provide when registering your account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or updating your account profile settings.
• Automated collection: Technical and usage data collected automatically when you access and interact with the wj7 platform, including data gathered via cookies, server logs, and analytics tools. See Section 07 (Cookies) for full details.
• Third-party providers: Identity verification data from KYC service providers; payment transaction data from bKash, Nagad, Rocket, Upay, and banking partners; game activity data from game providers including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming.
• Fraud prevention services: Technical risk signals and device fingerprint data from third-party fraud prevention and anti-money-laundering screening providers used to protect the integrity of the wj7 platform.

03 How We Use Your Personal Data

wj7 processes your personal data only for the following specific and legitimate purposes:

• Creating, maintaining, and administering your wj7 account, including verifying your eligibility to register and play.
• Processing deposits and withdrawals in Bangladeshi Taka (BDT) via bKash, Nagad, Rocket, Upay, and supported bank accounts.
• Fulfilling our Know Your Customer (KYC) and age verification obligations to confirm that all account holders are aged 21 or above.
• Detecting, investigating, and preventing fraud, money laundering, match-fixing, bonus abuse, and other prohibited activities on the wj7 platform.
• Delivering customer support, responding to complaints, and resolving disputes in accordance with the wj7 Terms & Conditions.
• Sending transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts. These communications are not marketing and cannot be opted out of while your account is active.
• Sending promotional communications — including bonus offers, tournament announcements, and seasonal promotions for events such as BPL, IPL, Eid, and Pohela Boishakh — where you have expressly opted in to receive them. You may opt out of marketing communications at any time via Account Settings.
• Conducting responsible gaming monitoring to identify patterns of play that may indicate problem gambling behaviour, and for applying account-level limits or restrictions where required.
• Improving the wj7 platform through aggregated, anonymised analysis of usage patterns, game performance, and user journey data. This analysis does not identify individual users.
• Complying with applicable legal and regulatory obligations, including responding to lawful requests from law enforcement or judicial authorities.

04 Legal Basis for Processing

wj7 processes your personal data on the following legal bases, depending on the purpose of processing:

• Contractual necessity: Processing required to fulfil our obligations under the wj7 Terms & Conditions, including account management, transaction processing, and customer support.
• Legal obligation: Processing required for us to comply with applicable law, including KYC / AML obligations, age verification requirements, and responses to lawful authority requests.
• Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and aggregated analytics — where our legitimate interests are not overridden by your privacy rights.
• Consent: Processing of your data for direct marketing purposes, where you have provided explicit, freely given, informed, and unambiguous consent. You may withdraw this consent at any time without penalty.

05 Sharing Your Personal Data

wj7 does not sell, rent, or trade your personal data to any third party for their own purposes. We share your data only in the following limited and controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and other payment partners receive the minimum transaction data necessary to process your deposits and withdrawals.
• Game providers: Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming, and other certified game studios receive a session token and account identifier to initialise game sessions. These providers do not receive your full identity or financial data.
• KYC and fraud prevention providers: Third-party identity verification and AML screening providers receive the identity documents and data you submit during KYC. These providers operate under strict data processing agreements with wj7 and are not permitted to use your data for their own purposes.
• IT and platform service providers: Cloud hosting, security monitoring, and technical support vendors who process data on our behalf under binding data processing agreements and are contractually prohibited from using your data for any purpose beyond delivering the contracted service to wj7.
• Legal authorities: Where wj7 is required by law, court order, or other binding legal process to disclose your data to law enforcement or regulatory authorities, we will comply with such requests and, where lawfully permitted, notify you that a disclosure has been made.

All third parties with whom wj7 shares personal data are required to implement appropriate technical and organisational security measures and are bound by contractual obligations that prevent them from processing your data for any unauthorised purpose.

06 Data Retention

wj7 retains your personal data for as long as is necessary to fulfil the purpose for which it was collected, unless a longer retention period is required or permitted by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account plus a minimum of five years following account closure, in accordance with AML and KYC record-keeping obligations.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction, in accordance with financial record-keeping requirements.
• Game activity and betting history: Retained for a minimum of three years to support dispute resolution and responsible gaming monitoring.
• Customer support communications: Retained for two years from the date of the last communication in a given support thread.
• Technical and usage logs: Retained for up to 13 months from collection for security monitoring and analytics purposes, after which they are anonymised or deleted.
• Marketing consent records: Retained for as long as you hold a wj7 account and for two years following account closure, as proof of consent or opt-out.

Upon expiry of the applicable retention period, wj7 will securely delete or permanently anonymise your personal data. Anonymised data that can no longer be linked to any individual may be retained indefinitely for aggregate analytical purposes.

07 Cookies and Tracking Technologies

The wj7 platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. The following categories of cookies are used:

• Strictly necessary cookies: Required for core platform functions such as maintaining your login session, remembering your language and currency preferences, and processing transactions. These cookies cannot be disabled without breaking core functionality.
• Performance and analytics cookies: Used to collect anonymised data about how users interact with the wj7 platform, including pages visited, time spent, and error events. This data helps us improve platform performance and user experience.
• Functionality cookies: Used to remember your preferences, such as your preferred game categories, notification settings, and responsible gaming tool configurations.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and other security threats to your wj7 account.

wj7 does not use third-party advertising or retargeting cookies. Cookies set by game providers within embedded game frames are governed by those providers' own cookie policies and are used solely to deliver the game session.

08 Your Privacy Rights

As a wj7 account holder, you have the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] from the email address registered on your wj7 account:

• Right of access: You may request a copy of all personal data wj7 holds about you. We will respond within 30 days of receiving a valid request.
• Right to rectification: If any personal data held by wj7 is inaccurate or incomplete, you have the right to request that it be corrected or updated. Certain data corrections (e.g., legal name changes) may require supporting documentation.
• Right to erasure: You may request that wj7 delete your personal data. This right is subject to our legal retention obligations — data required for AML, KYC, or dispute resolution purposes cannot be deleted before the applicable retention period expires.
• Right to restrict processing: You may request that wj7 temporarily suspend the processing of your data while a dispute about its accuracy or our use of it is resolved.
• Right to data portability: You may request a machine-readable copy of the personal data you have provided to wj7, such as your account registration data and transaction history, in a structured format.
• Right to withdraw consent: Where wj7 processes your data on the basis of your consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.
• Right to object: You may object to wj7 processing your personal data on the basis of its legitimate interests. wj7 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

wj7 will acknowledge all privacy rights requests within 48 hours and provide a substantive response within 30 calendar days. Complex requests may take longer; in such cases wj7 will notify you of the extended timeline and reason for delay.

09 Children and Minors

wj7 is strictly an adults-only platform. We do not knowingly collect personal data from any individual under the age of 21. The wj7 registration process includes mandatory age declaration and is backed by KYC age verification for all account holders.

If wj7 becomes aware that personal data has been collected from a person under the age of 21 — whether through a false age declaration or any other means — the account will be immediately suspended, all balances will be frozen pending investigation, and any data relating to the minor will be securely deleted as soon as practicable following the resolution of any related financial or legal obligations.

Parents and guardians who have reason to believe that a minor has registered on wj7 should contact [email protected] immediately. We treat all reports of underage access as a priority matter.

10 Security Measures

wj7 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• All data transmitted between your browser or mobile device and wj7 servers is protected by 256-bit SSL/TLS encryption.
• Account passwords are stored using industry-standard one-way hashing algorithms. wj7 staff cannot view your password in plain text.
• Access to personal data within wj7's internal systems is restricted on a strict need-to-know basis with role-based access controls and full audit logging.
• wj7 data infrastructure is hosted in access-controlled, professionally managed data centre environments with continuous security monitoring.
• Regular penetration testing and vulnerability assessments are conducted on the wj7 platform by qualified security professionals.
• All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.

While wj7 takes all reasonable precautions to protect your data, no internet-based system can guarantee absolute security. You are responsible for keeping your wj7 login credentials secure and for logging out of your account after each session, particularly on shared or public devices.

11 Changes to This Privacy Policy

wj7 reserves the right to update or amend this Privacy Policy at any time. The "Last Updated" date at the top of this page will reflect the date of the most recent revision. Where changes are material — meaning they significantly affect how your personal data is used or your rights in relation to it — wj7 will notify active account holders by email or via an in-platform notification at least 14 days before the changes take effect.

Your continued use of the wj7 platform following the effective date of any amendment to this Policy constitutes your acknowledgement and acceptance of the updated terms. If you do not accept the revised Policy, you should cease using wj7 and contact [email protected] to request account closure.

12 Contact and Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data wj7 holds about you, please contact us using the details below. All privacy-related enquiries are handled by our dedicated data protection team.

When submitting a privacy rights request, please include your registered wj7 username and the email address associated with your account so that we can verify your identity before processing the request.