Your Privacy at
tas7 — Our Commitment

01 Introduction

tas7 operates the online gaming and sports betting platform accessible at https://tas7.io, providing casino games, live dealer tables, crash games, sports betting, and related entertainment services to players located in Bangladesh. In delivering these services, tas7 collects and processes certain categories of personal data about you.

This Privacy Policy ("Policy") describes in plain, honest language exactly what personal data tas7 collects, the purposes for which that data is used, the legal basis on which it is processed, how long it is retained, and the rights you hold as a data subject. Our approach to data protection is grounded in the principles of transparency, data minimisation, and purpose limitation.

This Policy applies to all personal data collected through: the tas7 website and mobile-optimised platform; account registration and KYC verification processes; deposit and withdrawal transactions; customer support interactions; and any marketing or promotional communications sent by tas7.

Effective Date: This Policy is effective from 1 January 2026 and supersedes all prior privacy notices published on this platform. The "Last Updated" date at the top of this page will be revised whenever material changes are made.

02 Data We Collect

tas7 collects personal data in several distinct categories. The table below provides a structured overview of the types of data collected and the primary context in which each category arises.

tas7 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where health-related information is voluntarily provided in the context of a responsible gaming request (for example, a self-exclusion application citing a gambling-related health concern). Such information is processed solely for the purpose of administering the responsible gaming tool and is not used for any other purpose.

03 How We Collect Your Data

tas7 collects personal data through the following channels and mechanisms:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a survey.
• Automated Technologies: Data collected automatically when you access the tas7 platform, including cookies, web beacons, server log files, and browser fingerprinting used for security and fraud detection purposes.
• Payment Processors: Confirmation and reference data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard following the processing of a transaction. tas7 does not receive your full mobile banking PIN or card number from these processors.
• Third-Party Game Providers: Session and outcome data generated by game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) when you play their games on the tas7 platform. This data is used to calculate winnings, settle bets, and detect irregular play patterns.
• Identity Verification Partners: Where an automated document verification service is used to validate your NID or passport, tas7 receives a verification status result (passed / failed / requires review) from the verification partner. The underlying document image is processed according to that partner's own data protection commitments.

04 How We Use Your Data

tas7 uses your personal data for the following specific purposes. We do not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your consent or establishing a new lawful basis for processing.

• Account Management: Creating, operating, and maintaining your player account, including verifying your identity and enforcing the single-account-per-person policy.
• KYC & Age Verification: Confirming that you are at least 21 years of age as required by tas7's player eligibility rules, and verifying that your identity documents are genuine.
• Payment Processing: Facilitating deposits and withdrawals in Bangladeshi Taka (৳ BDT) through your chosen payment method, and maintaining accurate financial records of all transactions.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, money laundering, multi-accounting, bonus abuse, and unauthorised access to accounts. IP address and device data are central to this function.
• Responsible Gaming: Monitoring player behaviour to identify potential signs of problem gambling, enforcing deposit limits, cool-off periods, and self-exclusions requested by the player, and contacting players where there is a reasonable duty-of-care concern.
• Customer Support: Responding to your enquiries, resolving disputes, and managing complaints in a fair and timely manner.
• Legal & Regulatory Compliance: Meeting tas7's obligations under applicable anti-money laundering policies, retaining transaction records for the required statutory periods, and responding to lawful requests from competent authorities.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the quality, performance, and range of games and services available on the tas7 platform.
• Marketing Communications (Consent-Based): Sending you promotional emails or SMS messages about bonuses, new games, seasonal offers (including Eid, Pohela Boishakh, and BPL season promotions), and other tas7 updates — only where you have given explicit consent to receive such communications.

05 Legal Basis for Processing

tas7 processes your personal data on the following legal bases, in line with internationally recognised data protection principles:

• Contractual Necessity: Processing required to fulfil the player agreement between you and tas7 — including account creation, game delivery, payment processing, and support — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with anti-money laundering obligations, age verification duties, record-keeping requirements, and responses to lawful authority requests is carried out on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, multi-account detection, responsible gaming monitoring, and aggregated analytics is carried out on the basis of tas7's legitimate interests, provided those interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications is carried out solely on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

06 Data Sharing & Disclosure

tas7 does not sell, rent, or share your personal data with third parties for their own marketing purposes. Data is shared with third parties only in the following defined circumstances:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard receive transaction reference data necessary to process your deposits and withdrawals. Each processor operates under its own privacy policy and data protection obligations.
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios receive session identifiers and bet data necessary to operate their games on the tas7 platform. These studios are contractually required to process this data solely for game delivery purposes.
• Identity Verification Partners: Where a third-party KYC service provider is engaged to verify your identity documents, your document data is shared with that provider under strict data processing agreements that limit its use to verification purposes only.
• Legal & Regulatory Authorities: tas7 may disclose personal data to competent law enforcement agencies, financial intelligence units, or other government authorities where required to do so by applicable law, court order, or in response to a formal legal request. tas7 will notify affected players of such disclosures where permitted by law.
• Business Transfers: In the event of a merger, acquisition, or sale of the tas7 business or platform assets, personal data held by tas7 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and given the opportunity to request data deletion if they do not wish their data to be transferred.

All third-party data processors engaged by tas7 are required to implement appropriate technical and organisational security measures, to process personal data only on tas7's instructions, and to comply with the data protection principles set out in this Policy.

07 Cookies & Tracking Technologies

The tas7 platform uses cookies and similar technologies to deliver a functional, secure, and personalised experience. The following categories of cookies may be used:

• Essential Cookies: Required for core platform functionality, including maintaining your authenticated session after login, remembering items in your account, and ensuring the platform loads correctly. These cookies cannot be disabled without impairing platform use.
• Functional Cookies: Used to remember your preferences such as display settings and notification choices. These cookies persist across sessions to save you from re-entering preferences each time you visit.
• Analytics Cookies: Used to collect anonymised and aggregated data about how players use the tas7 platform — for example, which game categories are most popular, which pages are visited most frequently, and where players encounter errors. This data is used solely to improve the platform and is never used to identify individual players.
• Security Cookies: Used for fraud detection and account security purposes, including identifying unusual login patterns, detecting automated access, and preventing cross-site request forgery attacks.

tas7 does not use third-party advertising cookies or behavioural targeting cookies that track your activity across other websites. You can manage cookie settings through your browser's privacy controls. Note that blocking essential or security cookies may prevent you from accessing certain areas of the tas7 platform or may cause security features to function incorrectly.

08 Data Retention

tas7 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and operating policy. The following retention periods apply:

• Active Account Data: Retained for the full duration of your registered account with tas7. If your account is inactive for more than 24 consecutive months, tas7 may contact you regarding account status before initiating a dormancy review.
• KYC & Identity Documents: Retained for a minimum of five years following account closure, in line with standard anti-money laundering record-keeping practices.
• Transaction Records: Retained for a minimum of five years following each transaction, for financial audit and AML compliance purposes.
• Customer Support Records: Retained for three years following the resolution of a support interaction or complaint, in case of subsequent dispute or re-escalation.
• Marketing Consent Records: Retained for three years following the withdrawal of consent, as evidence that marketing communications were sent lawfully during the consent period.
• Technical Logs (IP, Device, Session): Retained for 12 months for security and fraud investigation purposes, after which they are anonymised or deleted.

09 Your Data Rights

As a data subject whose information is processed by tas7, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact [email protected] with the relevant subject line indicated below. tas7 will acknowledge your request within 24 hours and respond in full within five business days.

• Right of Access (Subject Line: "Data Access Request"): You have the right to request a copy of the personal data tas7 holds about you, together with information about how it is being processed and the legal basis for that processing.
• Right to Rectification (Subject Line: "Data Correction Request"): If any personal data held by tas7 about you is inaccurate or incomplete, you have the right to request that it be corrected. Please include details of the inaccuracy and, where relevant, supporting documentation.
• Right to Erasure (Subject Line: "Data Deletion Request"): You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where you believe the processing is unlawful. This right is subject to mandatory legal retention obligations.
• Right to Restriction (Subject Line: "Data Restriction Request"): You have the right to request that tas7 restrict processing of your data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing pending verification of our legitimate interests.
• Right to Data Portability (Subject Line: "Data Portability Request"): Where processing is carried out on the basis of consent or contractual necessity, and by automated means, you have the right to receive your personal data in a structured, machine-readable format.
• Right to Object (Subject Line: "Data Processing Objection"): You have the right to object to processing carried out on the basis of legitimate interests, including profiling. You also have an unconditional right to object to the use of your data for direct marketing purposes.
• Right to Withdraw Consent (Subject Line: "Marketing Opt-Out"): Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

tas7 will not charge a fee for handling data rights requests unless a request is manifestly unfounded, excessive, or repetitive, in which case a reasonable administrative fee may be applied. All responses will be provided in English.

10 Data Security

tas7 takes the security of your personal data seriously and maintains a layered approach to data protection that encompasses technical, organisational, and procedural safeguards.

• Encryption in Transit: All data transmitted between your browser or mobile device and the tas7 platform is protected by 256-bit SSL/TLS encryption. Look for the padlock icon and "https://" in your browser address bar when using the tas7 platform.
• Encryption at Rest: Sensitive personal data, including identity document references and financial transaction records, is stored using AES-256 encryption at rest on tas7's secured servers.
• Access Controls: Access to personal data within tas7's systems is restricted on a strict need-to-know basis. Staff with access to sensitive data are subject to confidentiality obligations and undergo regular data protection training.
• Intrusion Detection: tas7 employs automated monitoring systems to detect and respond to unusual access patterns, attempted data breaches, and other security incidents in real time.
• Penetration Testing: The tas7 platform undergoes periodic security assessments by independent technical specialists to identify and remediate vulnerabilities before they can be exploited.

While tas7 takes all reasonable steps to protect your personal data, no internet-based system can be guaranteed to be completely secure. You are responsible for keeping your own login credentials confidential and for notifying tas7 immediately at [email protected] if you suspect that your account has been compromised.

11 Children & Minors

The tas7 platform is strictly intended for individuals who are 21 years of age or older. tas7 does not knowingly collect or process personal data relating to persons under the age of 21. All account registrations are subject to mandatory age verification as part of the KYC process.

If tas7 discovers or has reasonable grounds to believe that an account has been registered by, or is being used by, a person under the age of 21, that account will be immediately suspended, all pending transactions will be cancelled, and any deposited funds (less any withdrawals already made) will be returned to the depositing payment account. All personal data associated with the underage account will be deleted, except to the extent that retention is required for legal or compliance purposes.

Parents and guardians who believe that a minor in their household may have registered on the tas7 platform are encouraged to contact [email protected] immediately. tas7 also recommends the use of parental control software to restrict access to online gambling platforms for minors.

12 Third-Party Links

The tas7 platform does not contain links to third-party websites for general browsing purposes. All navigation within the tas7 platform remains within the tas7.io domain. However, game content delivered by third-party studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) may be embedded within the tas7 platform via iFrame or API integration.

tas7 is not responsible for the privacy practices of third-party game providers in respect of any data they may collect directly through their game interfaces. Players are encouraged to review the privacy policies of game providers if they have concerns about data collected in the course of gameplay. tas7 contractually requires all integrated game providers to process player data only for the purpose of game delivery and to maintain appropriate data security standards.

13 Changes to This Policy

tas7 reserves the right to update or revise this Privacy Policy at any time. Where changes are material — meaning they significantly affect how your personal data is collected, used, or shared — tas7 will provide reasonable advance notice by displaying a prominent notice on the tas7 platform and, where practicable, by sending an email notification to your registered address.

The "Effective Date" displayed at the top of this page will be updated each time this Policy is revised. We encourage you to review this Policy periodically to stay informed about how tas7 protects your data. Your continued use of the tas7 platform following the effective date of any revised Policy constitutes your acceptance of the changes. If you do not accept the revised Policy, you must discontinue use of the platform and may request account closure and data deletion.

Minor amendments — such as corrections of typographical errors, clarification of existing practices that do not change the substance of any provision, or updates to contact information — may be made without advance notice.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way tas7 handles your personal data, please contact us using the details below. All privacy-related enquiries are handled in English. Our team aims to respond within one business hour during Bangladesh Standard Time (BST, UTC+6).

• Customer Support & Privacy Enquiries (24/7): [email protected]
• Data Rights Requests: [email protected] (subject line as specified in Section 09)
• Business & Legal Enquiries: [email protected]
• Security Incident Reports: [email protected] (subject line: Security Incident)

Postal or in-person enquiries are not currently supported. All privacy correspondence should be directed to the email addresses listed above. tas7 confirms that email communications to these addresses are handled securely and are treated as confidential.