in7 Privacy Policy

Section 1

Introduction & Scope

in7 ("we", "us", "our", "the Platform") operates the online casino and sports betting platform accessible at in7.bio, providing registered players in Bangladesh with access to sports betting markets, live casino games, slot titles, and associated financial services. In the course of providing these services, in7 necessarily collects and processes personal data relating to players and, to a more limited extent, unregistered visitors to the platform.

This Privacy Policy sets out, in plain and accessible English, exactly what personal data in7 collects, the purposes for which it is processed, the legal basis on which that processing rests, the circumstances under which it may be shared with third parties, and the rights available to data subjects in relation to their personal information.

This Policy applies to:

• All registered in7 account holders, irrespective of whether they are currently active or inactive.
• All unregistered visitors who browse in7.bio, including those who begin but do not complete the registration process.
• All individuals who contact in7 by email, live chat, or any other channel for support, complaint, or enquiry purposes.

By creating an in7 account or by continuing to use in7.bio, you acknowledge that you have read this Privacy Policy and consent to the data practices described herein. If you do not agree, you must stop using the platform and, if you are a registered player, close your account by contacting [email protected].

Section 2

Data We Collect

in7 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and in limited cases from third-party verification providers. The categories of personal data collected are described below.

2.1 Registration & Account Data

When you register an in7 account, we collect the following information which you provide directly:

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used to verify that you meet the 18+ age requirement).
• Residential address, including district and division within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh).
• Email address.
• Bangladesh mobile phone number (used for account communications and SMS-based two-factor authentication).
• Username and encrypted password.

2.2 Identity Verification (KYC) Data

As part of the Know Your Customer (KYC) process, in7 may request and store:

• Copies of government-issued photo identity documents (National ID Card, passport, or driving licence).
• Proof of address documents (utility bills, bank statements, or official government correspondence issued within the previous three months).
• Payment method verification materials (e.g., screenshot of bKash or Nagad account showing name and mobile number match).
• Source of funds documentation where required by anti-money laundering procedures.

2.3 Financial Transaction Data

• Deposit and withdrawal amounts, dates, times, and payment methods used (bKash, Nagad, Rocket, Upay, bank transfer, card).
• BDT wallet balance history and transaction reference numbers.
• Bonus claims, wagering activity, and promotional redemption records.

2.4 Betting & Gaming Activity Data

• All bets placed, including stake amount, odds accepted, event or game, and outcome.
• Casino game sessions, including game title, session duration, bets placed, and net result.
• Slot and crash game session data from providers including Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi.

2.5 Technical & Device Data

• IP address and approximate geographical location derived from IP.
• Device type, operating system, and browser version.
• Mobile network provider (e.g., Grameenphone, Robi, Banglalink, Teletalk).
• Session timestamps, login history, and page interaction data.
• Cookie identifiers and similar tracking data (see Section 6).

2.6 Communications Data

• Content of support chat transcripts, emails, and any other communications you send to in7.
• Records of responsible gaming requests (deposit limit changes, self-exclus ion applications, cool-off period requests).
• Survey responses or feedback submitted voluntarily through the platform.

Section 3

How We Use Your Data

in7 uses personal data collected from players and visitors solely for the purposes described in this section. We do not use your data for any purpose that is incompatible with the reason it was originally collected.

Purpose	Data Categories Used
Account registration and management — creating, maintaining, and securing your in7 account.	Registration data, device data, communications data.
Identity and age verification (KYC) — confirming you are aged 18 or over and that your identity is genuine.	KYC data, registration data.
Processing deposits and withdrawals — facilitating BDT payments via bKash, Nagad, Rocket, Upay, and bank channels.	Financial transaction data, KYC data.
Fraud prevention and anti-money laundering — monitoring activity for suspicious patterns and fulfilling legal reporting obligations.	Financial transaction data, betting data, device data, KYC data.
Delivering betting and gaming services — recording bets, settling markets, managing game sessions, and applying bonus rules.	Betting and gaming data, financial data, registration data.
Responsible gaming compliance — applying deposit limits, processing self-exclusion requests, and monitoring for problem gambling indicators.	Betting data, financial data, communications data.
Customer support — responding to queries, resolving disputes, and handling complaints.	Communications data, account data, financial data.
Platform improvement and analytics — understanding how players use in7 to improve the experience, fix bugs, and plan new features.	Technical and device data, betting data (aggregated and anonymised where possible).
Promotional communications — sending eligible players information about bonuses, offers, and platform updates, where consent has been given.	Registration data, betting data, financial data.
Legal and regulatory compliance — meeting obligations imposed by applicable law or responding to lawful requests from authorities.	Any category as required by the specific legal obligation.

in7 does not use automated decision-making in a way that produces legal or similarly significant effects on players without human review. Where algorithmic tools are used (for example, to flag potential problem gambling patterns or suspicious transaction activity), a member of the in7 compliance team reviews the output before any account action is taken.

Section 4

Legal Basis for Processing

in7 processes personal data under the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: The majority of in7's data processing is necessary to perform the contract between in7 and the registered player — specifically, to provide the betting and gaming services you have signed up for, to process your deposits and withdrawals, and to manage your account.
• Legal obligation: Certain processing activities are required by law, including identity verification, age checks, anti-money laundering monitoring, and reporting obligations. in7 cannot waive these obligations regardless of player preference.
• Legitimate interests: in7 processes some data on the basis of legitimate interests, including fraud prevention, platform security, internal analytics, and abuse detection. Where we rely on legitimate interests, we have assessed that our interests are not overridden by the rights and freedoms of affected individuals.
• Consent: Where in7 sends optional marketing communications (such as promotional emails or bonus notifications), we do so only on the basis of explicit consent, which you may withdraw at any time by updating your notification preferences in your account dashboard or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Section 5

Data Sharing & Third Parties

in7 does not sell, rent, or trade personal data to third-party marketing companies or data brokers under any circumstances. Personal data is shared with third parties only to the extent strictly necessary for the purposes described in this Policy and only with parties who are bound by appropriate confidentiality and data protection obligations.

The categories of third parties with whom in7 may share personal data are as follows:

• Payment service providers: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, or Mastercard, we share the minimum transaction data required by that provider to process the payment. These providers operate under their own privacy policies and are independently responsible for their data handling practices.
• Identity verification providers: in7 may use third-party KYC and age-verification services to assist with document verification. These providers process identity documents under strict data processing agreements and are prohibited from using your data for any other purpose.
• Game content providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session and staking data necessary to operate their respective games within the in7 platform. Game providers do not receive your full identity data unless specifically required for game-level compliance.
• IT and infrastructure providers: in7 uses third-party cloud hosting, database, and security services to operate the platform. These providers act as data processors under instructions from in7 and do not use player data independently.
• Legal and regulatory authorities: in7 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by applicable law, a valid court order, or other lawful authority. in7 will notify affected players of such disclosures wherever legally permitted to do so.
• Fraud prevention networks: in7 may share fraud-related data with industry fraud prevention services to protect the platform and other players from criminal activity.

Section 6

Cookies & Tracking Technologies

in7 uses cookies and similar browser-based tracking technologies to operate the platform effectively, remember your preferences, analyse usage patterns, and maintain session security. The types of cookies used by in7 are described below.

Cookies set by third-party game providers (such as Pragmatic Play or Evolution Gaming) within embedded game frames are governed by those providers' own cookie policies. in7 does not control the cookies set by third-party game studios within their own iframes.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair the core functionality of the in7 platform and may prevent you from accessing your account or placing bets. Analytics and preference cookies may be disabled without affecting core functionality.

Section 7

Data Retention

in7 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account and registration data: Retained for the duration of your active account and for a minimum of 5 years following account closure, to meet anti-money laundering record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of 5 years following the completion of the verification process or account closure, whichever is later, in accordance with financial compliance obligations.
• Financial transaction records: Retained for a minimum of 5 years following each transaction date.
• Betting and gaming activity logs: Retained for a minimum of 3 years following the date of each session, or longer where required for dispute resolution or regulatory purposes.
• Support communications: Retained for a minimum of 2 years following the date of the last communication in a given support thread.
• Technical and device data (logs): Retained for up to 12 months, after which logs are anonymised or deleted.
• Marketing consent records: Retained for as long as you hold an active in7 account or until consent is withdrawn, whichever is earlier. Withdrawal records are kept for 2 years as evidence of the consent lifecycle.

On expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual. Where data has been shared with third-party processors, in7 instructs those processors to delete the relevant data in line with the same retention schedule.

Section 8

Your Privacy Rights

in7 respects your rights as a data subject. The following rights are available to all registered players and, where applicable, to unregistered visitors whose data in7 holds:

• Right of access: You may request a copy of all personal data that in7 holds about you. in7 will respond to access requests within 30 days of receipt, providing a structured summary of your data in a readable format.
• Right to rectification: If any personal data in7 holds about you is inaccurate or incomplete, you may request that it be corrected. Account holders may update most information directly within their account dashboard; for KYC-verified fields, contact [email protected].
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is otherwise unlawful. This right is subject to in7's legal retention obligations — data that must be retained under anti-money laundering or financial record-keeping law cannot be deleted on request until the applicable retention period expires.
• Right to restriction: You may request that in7 restrict the processing of your personal data in certain circumstances, for example while a dispute about accuracy is being resolved.
• Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request that in7 provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object at any time to processing based on legitimate interests, including profiling for fraud prevention purposes. in7 will assess the objection and cease the relevant processing unless compelling legitimate grounds that override your interests can be demonstrated.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing already carried out.

To exercise any of the above rights, please contact in7 at [email protected] with your full name, registered email address, and a clear description of the right you wish to exercise. in7 will verify your identity before processing any data subject request. Requests are processed free of charge unless they are manifestly unfounded or excessive.

Section 9

Data Security

in7 employs industry-standard technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• Transport layer security: All data transmitted between your device and in7.bio is encrypted using 256-bit TLS (SSL) encryption. The padlock icon in your browser confirms this encryption is active during your session.
• Encrypted data storage: Sensitive personal data, including identity documents and payment information, is stored in encrypted form at rest on secured servers.
• Access controls: Access to personal data within in7's internal systems is restricted to authorised personnel on a strict need-to-know basis. All staff with data access undergo security training and are bound by confidentiality agreements.
• Two-factor authentication: in7 offers two-factor authentication (2FA) for all player accounts and strongly recommends its use to prevent unauthorised account access.
• Regular security reviews: in7 conducts periodic internal security reviews and vulnerability assessments to identify and remediate potential weaknesses in platform infrastructure.
• Incident response: In the event of a data breach that poses a risk to player rights and freedoms, in7 will notify affected players and relevant authorities without undue delay and in accordance with applicable legal requirements.

in7 cannot guarantee absolute security against all possible threats — no internet-based platform can. However, we are committed to continuous improvement of our security posture and to responding promptly and transparently to any security incident that may arise.

Section 10

Updates to This Policy

in7 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform services, or applicable legal requirements. When material changes are made to this Policy, in7 will notify registered players by displaying a prominent notice on the platform or by sending a notification to the contact details registered on the affected account.

The updated Privacy Policy will be published on this page with a revised "Last Updated" date at the top of the document. Your continued use of the in7 platform following publication of an updated Policy constitutes your acknowledgement of the revised terms. If you do not accept the updated Policy, you must stop using the platform and close your account.

For any questions, concerns, or requests relating to this Privacy Policy or in7's data practices, please contact our support team. All privacy-related communications are handled confidentially and in English by in7's dedicated support staff, available 24 hours a day, 7 days a week.

Email: [email protected] — Hours: 24/7 (Bangladesh Standard Time, UTC+6)