7ace Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 7ace ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal data of individuals ("you", "the Player", "the User") who visit, register on, or otherwise interact with the 7ace website located at https://7ace.io and all associated sub-domains, mobile-optimised pages, and services. This Policy forms an integral part of the 7ace Terms & Conditions and should be read together with that document.

By accessing the 7ace platform, creating a player account, making a deposit, or using any service provided by 7ace, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must immediately cease using the platform and may request account closure by contacting [email protected].

7ace is committed to handling personal data responsibly. We collect only the data we genuinely need, we store it securely, we are transparent about how it is used, and we respect your rights as a data subject at all times. Our operations are directed at the Bangladesh market, and references to time zones within this Policy use Bangladesh Standard Time (BST, UTC+6).

2. Data We Collect

7ace collects personal data through several channels: directly from you when you register or interact with the platform, automatically as you browse and play, and from third-party service providers who assist us in operating the platform. The categories of personal data we collect include:

7ace does not intentionally collect special categories of sensitive personal data such as health information, racial or ethnic origin, political opinions, or religious beliefs. If any such data is incidentally disclosed during a support interaction, it will not be stored beyond the resolution of that interaction unless legally required.

3. How We Use Your Data

7ace processes personal data only for specific, legitimate purposes. The table below summarises the primary purposes for which we use each category of data and the legal basis on which that processing rests:

• Account Creation and Management: We use your identity and contact data to create and maintain your player account, to communicate account-related notices, and to process password resets and account changes.
• Identity Verification (KYC): We use identity data to verify that you are who you claim to be, to confirm you are aged 21 or above, and to comply with anti-money laundering screening requirements.
• Transaction Processing: We use financial data to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; to record transaction histories; and to investigate payment disputes.
• Platform Security and Fraud Prevention: We use technical and usage data to detect suspicious login activity, identify potentially fraudulent accounts, prevent bonus abuse, and safeguard the integrity of the platform.
• Responsible Gaming Monitoring: We use usage and preference data to monitor for signs of problem gambling behaviour, to enforce self-imposed deposit limits or cooling-off periods, and to trigger responsible gaming interventions where appropriate.
• Customer Support: We use communications data to respond to support enquiries, resolve disputes, and improve the quality of our support team's responses.
• Platform Improvement: We use aggregated, anonymised usage data to understand how players interact with the platform, identify technical issues, and prioritise feature development.
• Marketing Communications: Where you have opted in to marketing, we may use your contact data to send promotional emails about bonuses, new games, and upcoming events. You may opt out at any time by contacting [email protected] or updating your account preferences.
• Legal and Regulatory Compliance: We may process and retain personal data where required by law, including for anti-money laundering record-keeping and responding to lawful requests from competent authorities.

7ace will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a new legitimate legal basis for doing so.

4. Data Sharing & Disclosure

We do not sell your personal data. 7ace does not transfer personal data to third parties for commercial gain. However, to operate the platform effectively, we engage a limited number of trusted third-party service providers who may process personal data on our behalf. These include:

• Payment Processors: bKash, Nagad, Rocket, Upay, and international card networks (Visa, Mastercard) receive the financial data necessary to execute your deposit and withdrawal transactions.
• Identity Verification Providers: Third-party KYC services may receive copies of identity documents to assist with age and identity verification. These providers are contractually bound to use this data solely for verification purposes.
• Game Software Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier to deliver game content and record game outcomes. They do not receive your full identity or contact details.
• Analytics Providers: Platform performance analytics tools receive anonymised or pseudonymised technical and usage data to help us understand site performance and player behaviour.
• Customer Support Infrastructure: Communication platform providers who facilitate our live chat and support ticketing systems may process communications data as data processors acting under our instruction.
• Legal and Regulatory Authorities: 7ace may disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where compelled by lawful order, warrant, or applicable legal obligation. Where permitted by law, we will notify affected players of such disclosures.

All third-party service providers engaged by 7ace are subject to data processing agreements that require them to handle personal data in a manner consistent with this Policy, to implement appropriate security measures, and to process data solely for the purposes specified by 7ace. 7ace remains responsible for the privacy practices of its data processors.

5. Cookies & Tracking Technologies

7ace uses cookies and similar technologies (web beacons, local storage, session tokens) to deliver and improve the platform. A cookie is a small text file placed on your device when you visit a website. Cookies allow the platform to recognise your device on return visits, maintain your logged-in session, and remember your preferences.

The cookies used by 7ace fall into the following categories:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, anti-fraud tokens, and load-balancing cookies. You cannot opt out of these cookies without ceasing to use the platform.
• Functional Cookies: Remember your preferences such as language selection, lobby layout, and last-played game position. Disabling these cookies may reduce your experience quality but will not prevent platform access.
• Analytics Cookies: Collect anonymised data about how players navigate the platform — which pages are most visited, how long sessions last, and where technical errors occur. This data is used to improve the platform. These cookies do not identify individual players.
• Security Cookies: Help detect and prevent fraudulent login attempts, account takeovers, and bot activity on the platform.

7ace does not use third-party advertising cookies or retargeting pixels that track your activity across other websites. You may manage cookie settings through your browser settings at any time. Note that disabling strictly necessary cookies will impair your ability to log in and use the platform.

6. Data Retention

7ace retains personal data for as long as necessary to fulfil the purposes outlined in this Policy, to maintain an active player account, or as required by applicable legal obligations. The general retention periods that apply are:

• Account Data (identity, contact): Retained for the duration of the active account and for a minimum of 5 years following account closure, in line with anti-money laundering record-keeping best practices.
• Financial Transaction Records: Retained for a minimum of 5 years following the date of each transaction.
• KYC Documents: Retained for the duration of the account and for a minimum of 5 years after closure. Original document images are stored in an access-controlled environment.
• Support Communications: Retained for 2 years from the date of the last interaction in a given support thread, unless the communication relates to a dispute that remains unresolved, in which case it is retained until resolution plus 2 years.
• Technical and Usage Logs: Retained for 12 months in detailed form; thereafter retained in aggregated, anonymised form indefinitely for platform analytics purposes.
• Marketing Preference Records: Retained for as long as the account is active plus 1 year, to provide evidence of consent or opt-out.

When data reaches the end of its retention period, it is securely deleted or irreversibly anonymised. Players may request early deletion of their personal data (subject to legal retention obligations) by submitting a written request to [email protected].

7. Security Measures

7ace takes the security of your personal data seriously and has implemented a layered set of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure. Key security controls in place include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and the 7ace platform is encrypted using industry-standard TLS protocols.
• Encrypted Data Storage: Sensitive data fields — including identity document data and financial account identifiers — are encrypted at rest using strong symmetric encryption algorithms.
• Access Controls: Personal data is accessible only to 7ace staff and contractors who require it to perform their specific job functions. Access is governed by role-based permissions and is logged and audited regularly.
• Intrusion Detection: The 7ace platform operates continuous monitoring for suspicious activity, including automated alerts for anomalous login patterns, unusual transaction volumes, and potential account takeover attempts.
• Secure Password Storage: Account passwords are never stored in plain text. They are hashed using a strong cryptographic hashing algorithm with per-user salting.
• Regular Security Reviews: 7ace conducts periodic internal security assessments and engages external specialists to review the platform's security posture.

While 7ace applies all reasonable technical and organisational security measures, no system connected to the internet is entirely immune from risk. Players are encouraged to use strong, unique passwords for their 7ace account and to contact [email protected] immediately if they suspect any unauthorised access to their account.

8. Your Rights

As a 7ace player, you have a number of rights with respect to the personal data we hold about you. To exercise any of these rights, please submit a written request to [email protected] from the email address registered on your account. We will acknowledge your request within 24 hours (BST) and aim to respond fully within 5 business days.

• Right of Access: You have the right to request a copy of the personal data we hold about you and information about how it is being used. We will provide this in a clear, machine-readable format where possible.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Some corrections (e.g., changes to name or date of birth) may require documentary evidence.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes it was collected, where you withdraw consent (if consent was the legal basis), or where you object to processing and there is no overriding legitimate interest. Note that legal retention obligations may prevent full erasure during minimum retention periods.
• Right to Restriction: You may request that we temporarily restrict the processing of your personal data while a dispute or correction request is being resolved.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format for transfer to another service provider, where technically feasible.
• Right to Object to Marketing: You may withdraw your consent to receive marketing communications at any time by emailing [email protected] or updating your account preferences. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing carried out prior to the withdrawal.

9. Minors & Age Verification

21+ Only. The 7ace platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the registration and KYC process. Any account found to belong to a person under the age of 21 will be immediately suspended, all funds will be refunded to the originating payment method (net of any bonuses claimed), and the account will be permanently closed.

If you are a parent or guardian and you believe that a person under the age of 21 in your care has registered an account or provided personal data to 7ace without your knowledge, please contact us immediately at [email protected]. We will investigate the matter, close any confirmed underage account, and securely delete the associated personal data without delay.

7ace uses age verification at the point of registration and may conduct additional KYC checks at any stage during the life of an account. Players who cannot or do not provide satisfactory age verification documentation will have their account access restricted until verification is completed.

10. Changes to This Policy

7ace reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players via the email address associated with their account and display a prominent notice on the platform for a period of not less than 7 days before the updated Policy takes effect.

The date at the top of this Policy indicates when it was last reviewed and updated. We encourage all players to review this Policy periodically. Continued use of the 7ace platform following the effective date of any revised Policy constitutes acceptance of the updated terms. If you do not agree with the changes, you must stop using the platform and request account closure before the effective date.

Archived versions of previous Privacy Policies are available on request by contacting [email protected]. Where a dispute arises about data processing practices that occurred in the past, the version of this Policy that was in force at the time of the relevant processing will govern.

11. Contact & Data Requests

If you have any questions about this Privacy Policy, about how 7ace handles your personal data, or if you wish to exercise any of the rights described in Section 8, please reach out to our support team using the contact details below. All privacy-related enquiries are handled by our dedicated data team and are treated with strict confidentiality.

• Email: [email protected] — use subject line "Privacy Enquiry" or "Data Rights Request" for fastest routing.
• WhatsApp: +880 1700-000000 — available 24/7 on Bangladesh Standard Time (BST, UTC+6).
• Response Time: Acknowledgement within 24 hours; full response within 5 business days (BST).
• Identity Verification: For data access or erasure requests, we will need to verify your identity before processing. Please send your request from your registered email address to expedite this step.