adds7 Privacy Policy — Your Data, Protected

Introduction

This Privacy Policy ("Policy") describes how adds7 ("adds7", "we", "us", "our") collects, processes, stores, and protects the personal data of users ("you", "your", "Player") who access and use the adds7 online gaming platform available at https://adds7.bio (the "Platform"). By registering an account and using the Platform, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data in the manner described herein.

adds7 takes data privacy seriously. We collect only the personal information that is necessary for the operation of the Platform, the verification of player identity, the processing of financial transactions, and the fulfilment of our legal and regulatory obligations. We do not sell your personal data to third parties. This Policy should be read alongside the adds7 Terms and Conditions, which govern your use of the Platform overall.

Your Privacy at a Glance

Information We Collect

adds7 collects personal data through several channels during your registration, use of the Platform, and interactions with our support team. The categories of personal data we collect include:

How We Use Your Data

adds7 uses your personal data only for the following defined purposes. We do not use your data for any purpose that is incompatible with the purposes listed below without obtaining your express prior consent:

• Account creation and management: to register your account, verify your identity and age, manage your account settings, and process your requests for account changes, voluntary self-exclusion, or account closure.
• Platform delivery and improvement: to provide you with access to the Platform's games and betting products, to personalise your experience where you have consented to this, and to analyse usage patterns to improve Platform performance and game catalogue quality.
• Financial transaction processing: to process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, or bank transfer; to maintain accurate financial records; and to detect and prevent fraudulent transactions.
• Legal and regulatory compliance: to fulfil our obligations under applicable anti-money-laundering regulations, to respond to lawful requests from regulatory or law-enforcement authorities, and to enforce the adds7 Terms and Conditions.
• Responsible gaming management: to monitor account activity for indicators of problem gambling behaviour, to apply deposit limits and self-exclusion decisions, and to enforce cooling-off periods requested by players.
• Customer support: to respond to your enquiries, process complaints, and communicate with you about your account, transactions, or any Platform changes that affect your rights or experience as a player.

Legal Basis for Processing

adds7 processes your personal data on the following legal grounds:

• Contractual necessity: processing is necessary to perform the contract between adds7 and you as a registered player — specifically, to operate your account, process your transactions, and provide access to Platform products.
• Legal obligation: processing is necessary to comply with applicable legal requirements including anti-money-laundering legislation, age verification obligations, and lawful requests from competent regulatory or law-enforcement authorities.
• Legitimate interests: processing for fraud prevention, security monitoring, responsible gaming management, and Platform improvement, where these interests are not overridden by your data protection rights.
• Consent: where adds7 processes your data for optional purposes such as marketing communications or personalisation features, this processing is based on your freely given, informed, and specific consent. You may withdraw consent at any time by contacting adds7 support.

Sharing Your Information

adds7 does not sell, rent, or trade your personal data. We share your data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Game providers and platform technology partners: adds7's game catalogue is powered by certified third-party providers including Pragmatic Play, Evolution Gaming, Spribe, Microgaming, NetEnt, and Ezugi. These providers may receive limited session data (such as player ID, session token, and wager amounts) necessary to deliver the game. They are contractually prohibited from using this data for any purpose beyond game delivery.
• Payment service providers: transaction data is shared with bKash, Nagad, Rocket, Upay, and relevant banking partners solely for the purpose of processing your deposit or withdrawal. adds7 does not store your mobile banking credentials. Payment partners process transaction data under their own privacy policies.
• Regulatory and law-enforcement authorities: where adds7 is required by law or by a competent regulatory or law-enforcement authority to disclose personal data, adds7 will comply with such requirements. Where legally permissible, adds7 will notify the affected account holder of any such disclosure.
• Fraud prevention and security services: anonymised or pseudonymised usage data may be shared with third-party fraud detection and cybersecurity services for the purpose of protecting the Platform, detecting suspicious activity, and preventing financial crime.

All third parties with whom adds7 shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond the specific purpose for which it was shared.

Payment Data and Financial Security

All financial transactions on the adds7 Platform are processed via encrypted connections. adds7 does not store full mobile banking account numbers, bKash PINs, Nagad PINs, or any equivalent payment credential. When you initiate a deposit or withdrawal, the transaction is routed securely to the relevant payment service provider (bKash, Nagad, Rocket, Upay, or bank) via their certified API. The only payment data retained by adds7 is the information necessary to maintain a transaction record: the payment method type, the wallet or account reference (partial, masked), the transaction amount in BDT, the timestamp, and the transaction status.

adds7 strongly recommends that players never share their bKash, Nagad, Rocket, or bank account credentials — including PINs, passwords, and OTP codes — with any third party, including anyone claiming to represent adds7 support. adds7 will never ask for your mobile banking PIN through any channel.

Cookies and Tracking Technologies

The adds7 Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain your session when you are logged in, and to gather anonymised analytics data that helps adds7 understand how the Platform is used and where it can be improved. The types of cookies used by the Platform include:

• Essential cookies: required for the Platform to function. These include session management cookies that keep you logged in during your visit, security tokens that protect against cross-site request forgery, and cookies that remember your language preference. These cookies cannot be disabled without breaking core Platform functionality.
• Analytics cookies: used to collect anonymised data about how players navigate the Platform, which games are most accessed, how long sessions last, and where players encounter difficulties. This data is used solely for Platform improvement and is not linked to individually identifiable user profiles.
• Functional cookies: remember your Platform preferences (such as preferred language or display settings) to provide a more consistent experience across sessions. These cookies are not essential but improve usability and are enabled by default. You may disable them via browser settings without affecting core Platform access.

You can manage or disable non-essential cookies through your mobile browser's settings menu . Please note that disabling essential cookies will prevent you from logging in to your adds7 account and using the Platform's real-money features.

Data Retention

adds7 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. In practice, this means that account data and transaction records are retained for a minimum of five years following account closure to comply with anti-money-laundering and financial record-keeping requirements. After the applicable retention period has expired, personal data is securely deleted or anonymised in accordance with adds7's internal data management procedures.

Data related to self-excluded players is retained throughout the self-exclusion period and for a further period thereafter to ensure that the self-exclusion cannot be circumvented by re-registration. KYC documents are retained for the duration of the account relationship and for the legally required period following account closure. If you request deletion of your data and no legal retention obligation applies, adds7 will process your deletion request within 30 days.

Your Data Rights

As a player using the adds7 Platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact the adds7 support team using the contact details published on the Platform:

• Right of access: you may request a copy of all personal data that adds7 holds about you. adds7 will provide this within 30 days of receiving a valid request.
• Right of rectification: if any personal data adds7 holds about you is inaccurate or incomplete, you may request that it be corrected. Identity corrections may require supporting documentation.
• Right of erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, and where no overriding legal retention obligation applies. adds7 will process erasure requests within 30 days, subject to applicable legal constraints.
• Right to restrict processing: in certain circumstances — for example, where you contest the accuracy of data or where you have objected to processing — you may request that adds7 restrict the processing of your data while the matter is being resolved.
• Right to withdraw consent: where adds7's processing of your data is based on your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

adds7 will respond to all data rights requests within 30 days. Where a request is complex or where adds7 receives a high volume of requests, this period may be extended by a further 30 days, in which case adds7 will notify you of the extension and the reason for it.

Security of Your Data

adds7 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data in transit between your device and the Platform servers, encrypted storage of sensitive account data, access controls limiting who within adds7 can access personal data, regular security assessments of Platform infrastructure, and procedures for detecting, reporting, and responding to personal data breaches.

Despite these measures, no internet-based platform can guarantee absolute security. If you believe your adds7 account has been accessed without your authorisation, you should contact adds7 support immediately. adds7 will investigate all credible security reports and will take appropriate remedial action, including notifying affected players where a personal data breach is confirmed.

Children and Minors

The adds7 Platform is strictly for adults aged 21 and above. adds7 does not knowingly collect personal data from any person under the age of 21. If adds7 discovers or is notified that personal data has been collected from a minor, adds7 will immediately delete that data and close the associated account. If you are a parent or guardian and believe your child has registered an account on the Platform, please contact adds7 support immediately so that the account can be closed and any associated data deleted. adds7 takes its obligations regarding the protection of minors seriously and applies age verification checks as part of the KYC process for all accounts.

Changes to This Privacy Policy

adds7 reserves the right to update or amend this Privacy Policy at any time. Where a material change is made, adds7 will notify registered account holders via the contact details held on their account, and the revised Policy will be published on the Platform with an updated effective date. Your continued use of the Platform following notification of a material change constitutes your acceptance of the revised Policy. If you do not agree to the revised Policy, you must cease using the Platform and may request voluntary account closure by contacting adds7 support.

Contact Us About This Policy

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have concerns about the way adds7 handles your personal information, please contact the adds7 support team using the contact details published on the Platform. adds7 aims to respond to all privacy-related enquiries within 5 business days.

This Privacy Policy is written in English. In the event of any inconsistency between this English version and any translation, the English version shall prevail. This Policy applies to all players using the adds7 Platform regardless of the device or location from which they access it, subject to any overriding local laws applicable in their jurisdiction.