Your Privacy at tas7
At tas7, protecting the personal data of every player across Bangladesh is a fundamental part of how we operate. This Privacy Policy explains exactly what information we collect, why we collect it, how it is used, and the controls available to you as a data subject.
What This Policy Covers
Personal details you provide during registration — name, date of birth, email address, and contact number — collected to verify your identity and maintain your tas7 account.
Transaction records, deposit and withdrawal history, and payment method identifiers (bKash, Nagad, Rocket, Upay) used to process payments and meet anti-money-laundering obligations.
Records of games played, bets placed, session durations, and platform interactions — used to personalise your experience and support responsible gaming monitoring.
IP address, browser type, device identifiers, and cookie data collected automatically when you visit tas7. Used for security, analytics, and platform optimisation.
Records of your correspondence with the tas7 support team, including emails, live chat transcripts, and support ticket history — retained to resolve disputes and improve service quality.
Identity and address documents submitted as part of KYC verification — national ID cards, passports, and utility bills — held securely and used solely for compliance and fraud prevention.
1 Data We Collect
tas7 collects personal data from you through several channels during the course of your relationship with our platform. We collect only the information that is necessary and proportionate for the purposes described in this Privacy Policy. The categories of personal data we collect are as follows:
Registration and Identity Data
When you create a tas7 account, we collect your full legal name, date of birth, email address, mobile telephone number, and residential address. This information is required to open and maintain your account, verify that you meet the minimum age requirement of 18 years, and comply with our Know Your Customer (KYC) obligations.
KYC Verification Documents
To satisfy identity verification requirements, we may ask you to submit copies of one or more of the following documents: a valid National Identity Card (NID), passport, driving licence, or recent utility bill or bank statement as proof of address. These documents are reviewed by our compliance team and stored securely in encrypted form. They are used exclusively for identity verification and fraud prevention and are never shared with third parties for marketing purposes.
Financial Data
We record all deposits and withdrawals processed through your tas7 account, including the payment method used (bKash, Nagad, Rocket, Upay, or bank transfer), the transaction amount in Bangladeshi Taka (৳), timestamps, and reference numbers. We do not store full mobile wallet PINs, bank account passwords, or card CVV numbers on our systems.
Technical and Usage Data
When you access the tas7 platform — whether via a desktop browser or a mobile device — our servers automatically record certain technical data, including your IP address, browser type and version, operating system, screen resolution, referring URL, session start and end times, pages visited, and click-path data within the platform. This data helps us maintain platform security, diagnose technical faults, and understand aggregate usage patterns.
Communications Data
If you contact our support team by email or live chat, we retain a record of the communication. This includes the content of your message, the date and time of contact, and any resolution actions taken. These records are maintained to ensure continuity of support and to assist in resolving any disputes that may arise.
Sensitive Data: tas7 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or political opinions. If you voluntarily disclose any such information in a support communication, we will treat it with the highest level of confidentiality and will not process it for any purpose other than responding to your query.
2 How We Use Your Data
tas7 processes your personal data only where there is a lawful basis for doing so. The primary legal bases on which we rely are: (a) the performance of a contract with you (i.e., operating your tas7 account and delivering the services you request); (b) compliance with a legal obligation; (c) our legitimate interests in operating a secure and commercially viable platform; and (d) your explicit consent, where required.
The specific purposes for which we use your data are set out in the table below:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation and management | Registration data, identity documents | Contract performance |
| Age and identity verification (KYC) | NID, passport, proof of address | Legal obligation |
| Processing deposits and withdrawals | Financial data, payment method details | Contract performance |
| Fraud and money laundering detection | Financial data, technical data, gaming data | Legal obligation / Legitimate interests |
| Responsible gaming monitoring | Gaming data, session data | Legal obligation / Legitimate interests |
| Customer support and dispute resolution | Communications data, account data | Contract performance / Legitimate interests |
| Platform security and abuse prevention | Technical data, IP address, device data | Legitimate interests |
| Promotional communications (where opted in) | Email address, gaming preferences | Consent |
| Platform analytics and improvement | Aggregated technical and usage data | Legitimate interests |
tas7 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing a new lawful basis. We do not sell your personal data to any third party under any circumstances.
3 Data Sharing & Third Parties
tas7 does not sell, rent, or trade your personal data. We may, however, share specific categories of data with carefully selected third parties where necessary to deliver our services or to comply with our legal obligations. All third-party recipients are bound by confidentiality obligations and are permitted to use your data only for the specific purpose for which it was shared.
Game Software Providers
To deliver casino games and sports betting markets on the tas7 platform, we work with certified third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive technical session data (such as player session tokens and game-round identifiers) in order to operate game functionality. They do not receive your full personal profile or financial details.
Payment Processors
When you make a deposit or withdrawal, your transaction data is shared with the relevant payment service provider — such as bKash, Nagad, Rocket, Upay, or your bank — to the extent necessary to complete the transaction. These providers operate under their own privacy frameworks and are independently regulated by the Bangladesh Bank or equivalent authorities.
Identity Verification Services
tas7 may use accredited third-party KYC and identity verification services to assist with document verification and sanctions screening. These providers process your identity data under strict data processing agreements and are not permitted to use it for any purpose beyond the specific verification task.
Legal and Regulatory Disclosure
We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so. This includes situations involving suspected fraud, money laundering, or other criminal activity. We will disclose only the minimum data necessary and, where legally permissible, will notify you of such disclosure.
No Cross-Border Data Transfers for Marketing: tas7 does not transfer your personal data to entities outside Bangladesh for marketing or profiling purposes. Any cross-border data transfer that may occur in connection with payment processing or game provider infrastructure is governed by appropriate contractual safeguards.
4 Cookies & Tracking
The tas7 platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session state when you are logged in, and to help us understand how players interact with the site so that we can make targeted improvements.
Types of Cookies We Use
- Strictly Necessary Cookies: These cookies are essential for the tas7 platform to function. They enable core features such as login session management, balance display, and game loading. The platform cannot operate without them, and they cannot be disabled.
- Functional Cookies: These remember your preferences — such as your preferred language setting, last-visited game category, and display settings — so that your experience is consistent across sessions.
- Analytics Cookies: We use privacy-respecting analytics to understand aggregate traffic patterns, popular game categories, and navigation flows. This data is anonymised at the aggregate level before analysis and is not used to identify individual players.
- Security Cookies: Short-lived cookies used to detect and prevent fraudulent activity, identify unusual login patterns, and protect your account from session hijacking.
Managing Your Cookie Preferences
You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies via the settings menu. Please note that blocking strictly necessary cookies will prevent you from logging in or using core features of the tas7 platform. Detailed instructions for managing cookies are available in the help documentation of your browser of choice.
tas7 does not use third-party advertising networks or place tracking cookies on behalf of external advertisers. Our use of cookies is limited to the operational and analytical purposes described above.
5 Data Retention
tas7 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply as a general guide:
- Account and identity data: Retained for the lifetime of your active account and for a minimum of five (5) years following account closure. This retention period is driven by anti-money-laundering obligations that require gambling operators to maintain player records for an extended period after the end of the business relationship.
- Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping requirements.
- KYC verification documents: Retained for the duration of your account and for five (5) years after closure. Copies are held in encrypted storage with access restricted to the compliance team.
- Support communications: Retained for three (3) years from the date of the last correspondence in a support thread, or longer if the communication relates to an unresolved dispute.
- Technical and usage data (non-aggregated): Retained for up to thirteen (13) months from the date of collection, after which it is either deleted or anonymised for long-term analytical purposes.
- Marketing consent records: Retained for as long as you remain opted in, plus three (3) years after you opt out or your account is closed, to demonstrate compliance with consent obligations.
When your data reaches the end of its applicable retention period, it is securely deleted or anonymised using industry-standard data destruction methods. If you request erasure of your data before the end of the retention period, we will assess your request in accordance with your rights set out in Section 6, taking into account any overriding legal obligations that require us to retain specific records.
6 Your Data Rights
As a tas7 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our data team at [email protected] with the subject line "Data Rights Request" and include your registered email address and a description of your request. We will respond within a reasonable timeframe and in any case within 30 days of receiving a valid request.
- Right of Access: You have the right to request a copy of the personal data that tas7 holds about you, along with information about how it is being used.
- Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
- Right to Erasure: In certain circumstances, you may request that we delete your personal data. This right is subject to legal retention obligations — for example, we cannot delete financial records that we are legally required to retain.
- Right to Restriction of Processing: You may ask us to restrict the processing of your data in certain situations, such as while a dispute about the accuracy of your data is being resolved.
- Right to Data Portability: Where processing is based on your consent or on a contract with you, you may request a copy of your data in a structured, machine-readable format.
- Right to Withdraw Consent: Where we process your data based on consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.
- Right to Object: You may object to processing based on our legitimate interests, including profiling for responsible gaming monitoring. We will assess your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
Identity Verification for Rights Requests: To protect your privacy, tas7 will ask you to verify your identity before acting on any data rights request. This ensures that we do not disclose, modify, or delete data based on a request made by a person other than the account holder.
7 Security Measures
tas7 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following key controls:
- SSL/TLS Encryption: All data transmitted between your browser or device and the tas7 platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. This prevents interception of your data in transit.
- Encrypted Data Storage: Sensitive data — including KYC documents, financial records, and authentication credentials — is stored in encrypted form at rest. Encryption keys are managed separately from the encrypted data.
- Access Controls: Access to personal data within the tas7 organisation is restricted on a strict need-to-know basis. Employees and contractors with access to personal data are subject to confidentiality obligations and receive data protection training.
- Fraud Detection Systems: Automated systems monitor account activity in real time to detect patterns associated with account takeover, bonus abuse, and financial fraud. Suspicious activity triggers immediate review by our security team.
- Penetration Testing: The tas7 platform undergoes periodic security assessments and penetration testing conducted by independent security specialists to identify and remediate vulnerabilities before they can be exploited.
- Incident Response: In the event of a data security incident that poses a risk to your personal data, tas7 has an established incident response process. Affected players will be notified without undue delay where the incident is likely to result in a high risk to their rights and freedoms.
While tas7 takes every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. You also play an important role in keeping your account secure — always use a strong, unique password for your tas7 account and do not share your login credentials with anyone.
8 Policy Updates & Contact
tas7 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or improvements to the way we describe our processes. The effective date at the top of this document will be updated whenever a material change is made. We will notify registered players of significant changes via the email address on file with their account.
We encourage you to review this Privacy Policy periodically. Your continued use of the tas7 platform following the posting of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any update to this policy, you should cease using the platform and may request account closure in accordance with the process described in our Terms & Conditions.
Contact Our Data Team
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way tas7 handles your personal data, please contact us at:
tas7 Data Privacy Team
Email: [email protected]
Subject line: Privacy Policy Enquiry
Response time: within 30 days of receipt of a valid request
For questions specifically relating to responsible gaming and self-exclusion tools, please visit our Responsible Gaming page. For general platform questions, our FAQ page covers the most common topics.
Ready to Explore tas7?
Now that you understand how tas7 protects your privacy, dive into our full range of games and sports betting markets. Cricket, slots, live dealer tables, and more — all on a platform built for players across Bangladesh. For adults aged 18 and above only.