rrr7 Privacy Policy — Your Data, Fully Protected

01 Introduction

This Privacy Policy ("Policy") applies to all personal data processed by rrr7 ("we", "us", "our", "the Operator") in connection with the operation of the rrr7 online gaming platform at rrr7.club ("Platform"). It applies to all registered Players, visitors, and any other individuals whose personal data is processed by rrr7 in connection with the services we provide.

By accessing the Platform, registering an account, or using any rrr7 service, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. This Policy should be read in conjunction with the rrr7 Terms and Conditions.

rrr7 takes its obligations with respect to personal data seriously. We do not sell, rent, or trade your personal data to third parties for their own marketing purposes. Personal data shared with external parties is limited strictly to what is necessary for the purposes described in this Policy.

02 Personal Data We Collect

rrr7 collects personal data that you provide directly to us, data we generate automatically as you use the Platform, and in some limited cases, data obtained from trusted third-party sources for verification purposes. The categories of personal data we collect are set out in the table below.

We do not knowingly collect sensitive personal data beyond what is necessary for identity and age verification, fraud prevention, and regulatory compliance. We do not collect biometric data, medical records, or political or religious affiliation data.

03 How We Use Your Personal Data

rrr7 uses the personal data we collect for the following purposes:

• Account Registration and Management: To create, maintain, and administer your rrr7 account, verify your identity and age, and communicate important account-related information to you.
• Service Delivery: To provide you with access to sports betting, live casino, slots, and all other gaming products and features available on the rrr7 Platform.
• Financial Transactions: To process deposits, withdrawals, and refunds via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain accurate financial records of all transactions.
• Identity and Age Verification: To verify that you meet the minimum age requirement of 18 years and to comply with know-your-customer (KYC) obligations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, and other illegal or abusive conduct on the Platform.
• Responsible Gaming: To monitor gaming behaviour and activity patterns for signs of problem gambling, and to enforce responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion requests.
• Customer Support: To respond to your enquiries, process complaints, and provide technical assistance via live chat and email.
• Platform Improvement: To analyse usage patterns, conduct internal research, and improve the features, performance, and content of the rrr7 Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. You may opt out at any time via your account settings or by contacting support.
• Legal and Regulatory Compliance: To meet our obligations under applicable laws and regulations, respond to lawful requests from regulatory authorities, and maintain records as required.

04 Legal Basis for Processing

rrr7 processes your personal data on the following legal grounds, depending on the specific purpose of processing:

• Contract Performance: Processing is necessary to perform the contract we have with you — namely, to provide the gaming services described in the rrr7 Terms and Conditions.
• Legal Obligation: Processing is necessary to comply with applicable legal and regulatory requirements, including anti-money laundering obligations, know-your-customer requirements, and financial record-keeping mandates.
• Legitimate Interests: Processing is necessary for our legitimate interests in operating a safe, secure, and commercially viable gaming platform — for example, fraud detection, platform security, and responsible gaming monitoring — provided those interests are not overridden by your rights and interests.
• Consent: For marketing communications and non-essential cookies, we rely on your explicit consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

05 Data Sharing with Third Parties

rrr7 may share your personal data with the following categories of third parties:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks receive only the transaction data necessary to process deposits and withdrawals on your behalf. These providers operate under their own privacy policies and applicable financial regulations.
• Identity Verification Providers: Third-party KYC and age-verification services receive identity document data solely for the purpose of verifying your identity and age in accordance with our compliance obligations.
• Game Content Providers: Licensed game studios such as Evolution Gaming, Pragmatic Play, Spribe, and Ezugi receive limited technical identifiers (such as a session token) to facilitate gameplay. These providers do not receive your full name, financial data, or identity documents.
• Fraud Detection and Cybersecurity Providers: Technical and behavioural data may be shared with security service providers to detect and prevent fraudulent access, bonus abuse, and other harmful activity.
• Regulatory and Law Enforcement Authorities: rrr7 may disclose personal data to competent authorities where required to do so by law, court order, or lawful regulatory request. We will notify you of such disclosures where legally permitted to do so.
• Professional Advisers: Lawyers, auditors, and other professional advisers engaged by rrr7 may access personal data on a confidential, need-to-know basis in connection with the services they provide.

All third parties with whom rrr7 shares personal data are required to process that data in accordance with applicable privacy standards and only for the specific purpose for which it was disclosed.

06 Cookies & Tracking Technologies

rrr7 uses cookies and similar tracking technologies to operate and improve the Platform, analyse usage patterns, personalise your experience, and deliver relevant communications where you have consented to receive them.

Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core features such as secure login sessions, account authentication, and navigation. These cookies cannot be disabled without impacting Platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymous information about how visitors use the Platform — for example, which pages are visited most frequently and whether users encounter error messages. This data is used exclusively to improve Platform performance.
• Functionality Cookies: These cookies remember your preferences — such as your preferred language setting, notification preferences, and responsible gaming tool configurations — to provide a more personalised experience.
• Marketing and Targeting Cookies: Where you have given your consent, these cookies track your activity on the Platform to enable the delivery of relevant promotional offers and communications. You may withdraw consent for marketing cookies at any time via your account settings.

You can control and manage cookies through your browser settings. Please note that disabling certain categories of cookies may affect the availability and functionality of some rrr7 Platform features.

07 Data Retention

rrr7 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Personal data associated with an active rrr7 account is retained for the duration of the account relationship and for a period of five (5) years following permanent account closure.
• Financial and Transaction Records: Transaction history, deposit and withdrawal records, and associated financial data are retained for a minimum of seven (7) years from the date of the transaction, in accordance with anti-money laundering record-keeping obligations.
• Identity Verification Documents: KYC documents (e.g., NID copies, passport images) are retained for five (5) years from the date of verification or account closure, whichever is later.
• Support Communications: Customer support chat transcripts and email records are retained for three (3) years from the date of the interaction.
• Marketing Data: Where you have opted in to marketing communications, your marketing preferences are retained until you opt out or request deletion, after which they are removed within thirty (30) days.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual. Where anonymised data is retained for analytical purposes, it no longer constitutes personal data under applicable privacy frameworks.

08 Data Security

rrr7 implements robust technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security framework includes, but is not limited to, the following measures:

• Transport Layer Encryption: All data transmitted between your device and the rrr7 Platform is encrypted using industry-standard TLS/SSL protocols (256-bit encryption).
• Data Storage Security: Personal data is stored in access-controlled, encrypted databases hosted on secure infrastructure. Access is restricted to authorised personnel only, on a strict need-to-know basis.
• Access Controls: rrr7 staff and contractors who have access to personal data are subject to confidentiality obligations and regular security training. Administrative access to systems holding personal data requires multi-factor authentication.
• Fraud and Intrusion Detection: The Platform employs real-time monitoring systems to detect and respond to suspicious access attempts, unusual login activity, and potential data security incidents.
• Third-Party Security Audits: rrr7 engages independent security specialists to conduct periodic vulnerability assessments and penetration testing of the Platform infrastructure.

Despite these measures, no online platform can guarantee absolute security. In the event of a data security breach that is likely to result in a risk to your rights, rrr7 will notify affected users promptly in accordance with applicable notification obligations.

You also play a role in keeping your account secure. Do not share your rrr7 login credentials with anyone, use a strong and unique password, and contact support immediately at [email protected] if you suspect any unauthorised access to your account.

09 Your Privacy Rights

As a registered rrr7 user, you have the following rights with respect to your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request — [Your Username]".

• Right of Access: You have the right to request a copy of the personal data that rrr7 holds about you, together with information about how it is used and with whom it is shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal obligations to retain certain records (e.g., financial transaction data).
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to Data Portability: You have the right to receive a structured, machine-readable copy of the personal data you have provided to rrr7 and to request that it be transferred to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests, including for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., for marketing communications or non-essential cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

rrr7 will respond to all verified privacy rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty (30) days, of which you will be notified in advance.

10 Children's Privacy

The rrr7 Platform is strictly intended for adults aged 18 years and above. rrr7 does not knowingly collect, process, or retain personal data from individuals under the age of 18. If we become aware that personal data has been collected from a minor, we will immediately suspend the relevant account, delete the personal data, and void any associated balance or bonus credits.

If you believe that a minor has created an account on the rrr7 Platform or that we may hold personal data relating to a person under 18 years of age, please notify us immediately at [email protected]. We take all such reports seriously and will investigate promptly.

11 Updates to This Privacy Policy

rrr7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the structure of our business. When material changes are made, we will notify registered users via the email address associated with their account and/or via a prominent notice on the Platform prior to the changes taking effect.

The effective date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how rrr7 protects your personal data. Your continued use of the Platform after a revised Policy has been posted constitutes your acknowledgement of the changes.

12 Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how rrr7 handles your personal data, please contact our support team using the details below. All privacy-related correspondence is handled in English.

• Support Email: [email protected]
• Subject Line for Privacy Requests: "Privacy Rights Request — [Your Username]"
• Response Time: Within 30 calendar days of receipt
• Support Hours: 24 hours a day, 7 days a week

This Privacy Policy is published in English. In the event of any discrepancy between this English version and any translation, the English version shall be the authoritative text.