jea7 Privacy Policy
At jea7, protecting the personal data of our Bangladeshi players is a fundamental commitment. This Privacy Policy explains precisely what information we collect, how we use it, who we share it with, how we secure it, and what rights you hold over your own data as a jea7 account holder.
Protected
How jea7 Handles Your Privacy
Six core principles guide every data decision we make at jea7 — from the moment you register your account to every deposit, withdrawal, and game session thereafter.
Minimal Data Collection
jea7 collects only the personal data that is genuinely necessary to operate your account, process your transactions in Bangladeshi Taka, verify your identity for KYC compliance, and deliver a safe gaming experience. We do not collect data speculatively or for purposes unrelated to platform operation.
Secure Storage and Encryption
All personal data stored by jea7 is protected using 256-bit SSL encryption in transit and AES-256 encryption at rest. Access to production databases is restricted to authorised personnel only, with multi-factor authentication enforced on all administrative access points. Regular independent security audits are conducted.
Your Rights Over Your Data
Every jea7 account holder has the right to access a copy of their personal data, request corrections to inaccurate information, and request deletion of their data subject to legal retention obligations. Submit any data rights request to [email protected] and our team will respond within five (5) business days.
Controlled Third-Party Sharing
jea7 shares your data only with service providers operating under formal data processing agreements — including payment processors such as bKash, Nagad, Rocket, and Visa, as well as identity verification vendors and game studio providers. We never sell your personal data to third-party advertisers or data brokers.
Marketing You Can Control
jea7 sends promotional communications only to players who have not opted out, and never to players with active responsible gaming restrictions in place. You can unsubscribe from marketing emails at any time by contacting [email protected] or using the unsubscribe link in any promotional email. Opt-out requests are processed within 24 hours.
Clear Data Retention Limits
jea7 retains personal data only for as long as necessary to fulfil the purposes for which it was collected. Account data is retained for a minimum of five (5) years following account closure to satisfy anti-money laundering record-keeping requirements. Data no longer required is securely deleted or anonymised.
About This Policy: This Privacy Policy applies to all personal data processed by jea7 in connection with the jea7 platform accessible at jea7.io. It applies to all registered account holders and visitors to the platform, including players based in Bangladesh. This Policy is written in English and should be read alongside the jea7 Terms & Conditions and Responsible Gaming Policy.
Introduction
jea7 ("we", "us", "our") is committed to respecting and protecting the privacy of every individual who uses the jea7 platform. This Privacy Policy sets out in plain English how jea7 collects, uses, stores, shares, and protects personal data relating to our players and website visitors, and explains the rights that individuals hold in relation to their personal data.
This Policy applies to all data processing activities carried out by jea7 in connection with the operation of the jea7 platform at jea7.io, including account registration, identity verification, payment processing, gameplay activity, customer support interactions, and marketing communications. It covers data collected directly from you, data collected automatically through your use of the platform, and data received from third-party service providers.
By registering a jea7 account and using the platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree to the terms of this Policy, please do not use the jea7 platform. Questions about this Policy should be directed to [email protected].
Effective Date: This Privacy Policy came into effect on 1 January 2026. The most current version is always available at jea7.io/privacy-policy. When we make material changes to this Policy, registered players will be notified by email at the address associated with their account.
Personal Data We Collect
2.1 Data You Provide Directly
When you register a jea7 account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion, you provide us with personal data directly. This includes:
- Identity data: Full legal name, date of birth, gender, and National Identity Card number or passport number provided during KYC verification.
- Contact data: Email address, mobile phone number, and residential address in Bangladesh (including division, district, and postal code).
- Financial data: Payment method details including bKash account number, Nagad account number, Rocket account number, Upay account number, bank account details for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank transfers, and masked card numbers for Visa or Mastercard transactions. jea7 does not store full card numbers — these are handled by our PCI-DSS compliant payment processors.
- Verification documents: Copies of government-issued photo ID, proof of address, and proof of payment method ownership submitted during the KYC process.
- Support communications: The content of emails, live chat transcripts, and other communications you send to [email protected] or interact with through the platform's customer support channels.
- Responsible gaming data: Self-exclusion requests, deposit limit preferences, session time reminders, and cooling-off period activations that you configure through your account settings.
2.2 Data Collected Automatically
When you visit and use the jea7 platform, certain data is collected automatically through technical means:
- Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
- Usage data: Pages visited, games played, betting history, session duration, login timestamps (recorded in BST, UTC+6), actions taken within the platform, and navigation paths.
- Transaction data: Deposit amounts in Bangladeshi Taka (৳), withdrawal amounts, bonus credits received, wagering activity, game outcomes, and account balance history.
- Cookie and tracking data: Data collected via cookies, pixel tags, and similar tracking technologies as described in Section 6 of this Policy.
- Geolocation data: Approximate geographic location derived from your IP address, used for fraud prevention and access control purposes.
2.3 Data Received from Third Parties
jea7 may receive personal data relating to you from third-party service providers in the course of operating the platform:
- Payment processors: Transaction status confirmations, payment method ownership verification, and fraud signals from bKash, Nagad, Rocket, Upay, and card processors.
- Identity verification providers: Results of automated and manual identity verification checks conducted against government document databases.
- Fraud detection vendors: Risk scores, flagged behavioural patterns, and device fingerprinting data used to detect and prevent fraud and account takeover.
- Game studio providers: Game session data, round identifiers, and outcome records received from providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi for audit, dispute resolution, and responsible gaming monitoring purposes.
How We Use Your Personal Data
jea7 uses the personal data we collect for the following purposes. Each purpose is linked to a specific legal basis as described in Section 4.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity data, contact data | Contract performance |
| KYC identity and age verification | Identity data, verification documents | Legal obligation |
| Processing deposits and withdrawals in ৳ | Financial data, transaction data | Contract performance |
| Fraud prevention and security monitoring | Device data, usage data, financial data | Legitimate interest |
| Responsible gaming monitoring and tools | Usage data, responsible gaming data | Legal obligation / Legitimate interest |
| Customer support and dispute resolution | All relevant data, support communications | Contract performance |
| Promotional communications and bonus offers | Contact data, usage data | Consent / Legitimate interest |
| Platform analytics and performance improvement | Usage data, device data (anonymised) | Legitimate interest |
| Anti-money laundering record-keeping | Identity data, financial data, transaction data | Legal obligation |
jea7 does not use automated decision-making processes that produce legal or similarly significant effects on individual players without human review. Where automated systems flag an account for fraud or responsible gaming concerns, a human member of our compliance or support team reviews the case before any account action is taken.
Legal Basis for Processing
jea7 processes personal data on the following legal grounds:
- Contract performance: Processing is necessary to perform the contract between jea7 and you as a registered player — including creating your account, processing your bKash or Nagad deposits and withdrawals, delivering game access, and resolving disputes.
- Legal obligation: Processing is required to comply with applicable legal obligations, including anti-money laundering record-keeping, KYC age verification to enforce the 21+ minimum age requirement, and responding to lawful requests from regulatory or law enforcement authorities.
- Legitimate interest: Processing is necessary for jea7's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, product analytics, and sending relevant promotional communications to players who have not opted out — provided these interests are not overridden by your rights and interests.
- Consent: Where jea7 relies on your consent as the legal basis for processing (for example, for certain optional marketing communications or the use of non-essential cookies), you have the right to withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
Third-Party Data Sharing
5.1 Service Providers
jea7 shares personal data with the following categories of third-party service providers who process data on our behalf under formal data processing agreements. These providers are contractually obligated to process personal data only for the purposes specified by jea7 and to maintain appropriate security standards:
- Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — for the purpose of processing deposits and withdrawals in Bangladeshi Taka and verifying payment method ownership.
- Identity verification providers: Third-party KYC vendors who verify the authenticity of government-issued identity documents and cross-reference applicant data against available databases to confirm age and identity.
- Fraud detection and cybersecurity vendors: Providers of device fingerprinting, behavioural analytics, and real-time fraud scoring services used to protect jea7 accounts and prevent financial crime.
- Game studio providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game content providers who receive game session identifiers and account-level data necessary to deliver their game content through the jea7 platform and resolve any game-related disputes.
- Cloud infrastructure and hosting providers: Providers of the secure server infrastructure on which the jea7 platform and its data are hosted. All infrastructure providers are selected for their compliance with recognised security standards.
- Customer support platform vendors: Third-party software providers that power the jea7 live chat and email ticketing system. Support communications are processed through these systems.
5.2 Legal Disclosures
jea7 may disclose personal data to law enforcement agencies, regulatory authorities, courts, or other government bodies where required to do so by applicable law, or where jea7 reasonably believes that disclosure is necessary to protect the rights, property, or safety of jea7, its players, or the public. jea7 will, where legally permissible, notify affected players of such disclosures.
5.3 No Sale of Personal Data
jea7 does not sell, rent, or trade personal data to third-party advertisers, data brokers, or any other commercial entity. Data is shared with third parties solely for the operational and compliance purposes described in this Policy.
Payment Security Note: When you make a deposit via bKash, Nagad, or any other payment method, the transaction is processed directly by the payment provider. jea7 receives only a transaction confirmation reference and masked account details. Full financial credentials are never passed through or stored by jea7's systems.
Cookies and Tracking Technologies
6.1 What Are Cookies
Cookies are small text files placed on your device when you visit a website. jea7 uses cookies and similar tracking technologies (including pixel tags and local storage objects) to operate the platform, maintain your login session, remember your preferences, detect fraud, and analyse platform usage to improve our service.
6.2 Types of Cookies Used
- Strictly necessary cookies: Essential for the platform to function. These cookies maintain your authenticated login session, remember your currency and language preferences, and enable core security features. They cannot be disabled without preventing you from using the platform. No consent is required for strictly necessary cookies.
- Functional cookies: Used to remember your platform preferences such as game display settings, notification preferences, and responsible gaming tool configurations. These cookies improve your experience but are not strictly necessary for platform operation.
- Analytics cookies: Used to collect aggregated, anonymised data about how players navigate and use the jea7 platform, which pages are most visited, and where users encounter difficulties. This data is used to improve platform design and performance. Analytics cookies do not identify individual players.
- Security and fraud detection cookies: Used to identify and prevent fraudulent behaviour, account takeover attempts, and automated bot activity. These cookies collect device fingerprinting data and session behaviour patterns.
6.3 Cookie Management
You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies, though doing so may affect the functionality of the jea7 platform — in particular, blocking strictly necessary cookies may prevent you from logging in or maintaining your session. For detailed instructions on managing cookies in your specific browser, consult your browser's help documentation. To opt out of analytics-related data collection, contact [email protected].
Data Security
jea7 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:
- Encryption in transit: All data transmitted between your browser or device and jea7's servers is encrypted using 256-bit SSL/TLS protocols. The presence of HTTPS and a valid SSL certificate can be verified in your browser's address bar at all times when using the jea7 platform.
- Encryption at rest: Personal data and financial records stored in jea7's databases are encrypted using AES-256 encryption. Encryption keys are managed through a dedicated key management system with strict access controls.
- Access controls: Access to systems containing personal data is restricted to jea7 personnel and authorised service provider staff who require it to perform their specific roles. Multi-factor authentication is enforced on all administrative accounts.
- Intrusion detection and monitoring: jea7's infrastructure is monitored 24 hours a day for suspicious activity, unauthorised access attempts, and data exfiltration signals using automated intrusion detection systems and security information and event management (SIEM) tools.
- Regular security audits: jea7 commissions periodic independent security assessments including penetration testing, vulnerability scanning, and code security reviews to identify and remediate potential weaknesses before they can be exploited.
- Staff training: All jea7 personnel who handle personal data receive regular training on data protection obligations, phishing awareness, and incident response procedures.
Data Breach Notification: In the event of a personal data breach that is likely to result in a high risk to your rights and interests, jea7 will notify affected players without undue delay via the email address registered to their account. The notification will describe the nature of the breach, the data affected, and the steps jea7 has taken in response. Contact [email protected] immediately if you suspect your jea7 account has been compromised.
Data Retention
jea7 retains personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable legal and regulatory obligations. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration and identity data | 5 years after account closure | Anti-money laundering legal obligation |
| KYC verification documents | 5 years after account closure | Legal obligation / Fraud prevention |
| Transaction and financial records | 5 years after transaction date | Legal obligation |
| Game session and betting history | 3 years after last session | Dispute resolution / Legitimate interest |
| Customer support communications | 2 years after resolution | Legitimate interest |
| Responsible gaming records | 5 years after account closure | Legal obligation |
| Marketing consent records | Until consent withdrawn + 1 year | Legal obligation (consent evidence) |
| Analytics data (anonymised) | Indefinite (no personal identifiers) | Legitimate interest |
After the applicable retention period expires, personal data is either securely deleted from jea7's systems or irreversibly anonymised such that it can no longer be attributed to any identifiable individual. Anonymised data may be retained for statistical and analytical purposes without time limit.
Your Data Rights
As a jea7 account holder, you hold the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with your registered email address and a description of your request. jea7 will respond within five (5) business days and aim to fulfil all requests within thirty (30) calendar days.
- Right of access: You may request a copy of all personal data that jea7 holds about you. The copy will be provided in a structured, commonly used, machine-readable format where technically feasible.
- Right to rectification: If any personal data jea7 holds about you is inaccurate or incomplete, you may request that it be corrected. This right applies to contact details, identity information, and account preferences.
- Right to erasure: You may request that jea7 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the processing was unlawful. This right is subject to jea7's legal obligations to retain certain data (see Section 8).
- Right to restrict processing: You may request that jea7 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
- Right to data portability: Where jea7 processes your data on the basis of contract or consent, you may request that your data be provided to you in a portable format so that you can transfer it to another service provider.
- Right to object: You may object to jea7 processing your personal data on the basis of legitimate interest, including for direct marketing purposes. Where you object to marketing, jea7 will cease sending promotional communications within 24 hours of receiving your objection.
- Right to withdraw consent: Where jea7 relies on your consent as the legal basis for processing, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal date.
How to Submit a Data Rights Request: Email [email protected] with the subject line "Data Rights Request" and include your full name, registered email address, and a clear description of the right you wish to exercise. jea7 may ask you to verify your identity before processing the request. There is no charge for submitting a data rights request. Responses are issued in English within five (5) business days of receipt.
Children's Privacy and the 21+ Requirement
The jea7 platform is strictly for adults aged 21 years and above. jea7 does not knowingly collect, store, or process personal data belonging to individuals under the age of 21. The jea7 account registration process requires all applicants to confirm that they are at least 21 years old, and all accounts are subject to KYC age verification before any deposits or withdrawals are permitted.
If jea7 discovers or is notified that personal data belonging to an individual under the age of 21 has been collected, jea7 will immediately suspend the relevant account, refund any net deposits to the original payment method where possible, and permanently delete all personal data associated with that account.
If you believe that a minor has registered a jea7 account, please contact [email protected] immediately with the subject line "Underage Account Report". jea7 treats all such reports with the highest priority and will investigate and act within one (1) business day of receiving a credible report.
21+ Only: jea7 enforces strict age verification for all account holders. Attempting to register or use a jea7 account if you are under 21 years of age is a violation of the jea7 Terms & Conditions and may result in permanent account closure and forfeiture of any funds held in the account.
International Data Transfers
jea7 operates a platform that serves players primarily based in Bangladesh. Some of our third-party service providers — including game studio providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, as well as cloud infrastructure and fraud detection vendors — may process personal data on servers located outside Bangladesh.
Where personal data is transferred to a third country, jea7 takes steps to ensure that the transfer is subject to appropriate safeguards. These safeguards include requiring all data processors operating outside Bangladesh to be bound by contractual data protection clauses that provide a level of protection equivalent to that applied within jea7's own data processing operations, and selecting vendors that maintain recognised international security certifications such as ISO 27001 or SOC 2 Type II where available.
By using the jea7 platform and accepting this Privacy Policy, you acknowledge that your personal data may be processed in countries outside Bangladesh as described in this section. jea7 will not transfer personal data to a third country unless appropriate safeguards are in place as described above.
Changes to This Privacy Policy
jea7 reserves the right to update or revise this Privacy Policy at any time. All updates will be posted to jea7.io/privacy-policy with a revised effective date shown at the top of the document. The version of this Policy accessible at jea7.io/privacy-policy at any given time is the version currently in force.
Where changes to this Policy are material — meaning they significantly affect how jea7 collects or uses your personal data, or materially reduce your rights — jea7 will notify registered players by email to the address associated with their account at least seven (7) calendar days before the updated Policy takes effect. Continued use of the jea7 platform after the effective date of a revised Policy constitutes acceptance of the updated terms.
jea7 recommends that all players review this Privacy Policy periodically to stay informed about how their personal data is being handled. If you have questions about any update to this Policy, contact [email protected].
Version History: This is version 1.0 of the jea7 Privacy Policy, effective 1 January 2026. Previous versions will be made available upon request by contacting [email protected] with the subject line "Privacy Policy Version Request".
Contact Us
If you have any questions, concerns, or complaints about this Privacy Policy or about how jea7 handles your personal data, please contact the jea7 data protection team using the details below. All data protection enquiries must be submitted in English.
- Email: [email protected] (plain text — not a clickable link)
- Subject line for data rights requests: "Data Rights Request"
- Subject line for privacy complaints: "Privacy Policy Complaint"
- Subject line for underage account reports: "Underage Account Report"
- Response time: Within 1 hour for acknowledgement; full response within 5 business days (BST, UTC+6)
- Support availability: 24 hours a day, 7 days a week, including Bangladeshi public holidays
jea7 is committed to resolving all privacy-related enquiries promptly and fairly. If you are not satisfied with jea7's response to your privacy complaint, you may escalate your complaint to the relevant data protection authority in your jurisdiction.
Your Privacy Is Protected at jea7
Now that you've read the jea7 Privacy Policy, you can play with full confidence. Explore 500+ games, follow live cricket odds for BPL and IPL, or log in to your account to manage your data preferences directly.