ae7 Privacy Policy

Section 1

Data We Collect

ae7 collects personal data only to the extent necessary to operate a safe, compliant, and high-quality online gaming platform for players in Bangladesh. The following table outlines every category of data we collect, the specific data points within each category, and the reason for collection.

ae7 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health records. If you voluntarily disclose any such information in a support communication, it will be disregarded and not retained beyond the resolution of your query.

Section 2

How We Use Your Data

ae7 uses the personal data it collects exclusively for the following legitimate purposes. We do not use your data for purposes beyond those stated in this policy without first obtaining your explicit consent.

2.1 Account Operations

• Account creation and authentication: Your registration data enables us to create and manage your ae7 account, authenticate your login sessions, and restore account access where credentials have been lost.
• Payment processing: Financial data is used to credit deposits to your ae7 wallet and process withdrawal requests to your registered bKash, Nagad, Rocket, Upay, or bank account in BDT.
• KYC verification: Identity documents are used solely to confirm that you meet the 18+ age requirement and that your identity matches your registered account details before withdrawals are approved.
• Customer support: Communication data allows our support team to respond accurately to your queries, resolve disputes, and process responsible gaming tool requests (such as self-exclusion and deposit limits).

2.2 Platform Safety and Compliance

• Fraud prevention: Technical and financial data is analysed to detect patterns consistent with fraudulent account activity, money laundering, bonus abuse, or multi-accounting. Suspicious activity may result in account suspension and data referral to relevant authorities.
• Responsible gaming monitoring: Gaming activity data is used to identify patterns that may indicate problem gambling behaviour, enabling ae7 to proactively offer responsible gaming tools to at-risk players.
• Age verification compliance: Date of birth data and KYC documents are used to enforce ae7's strict 18+ policy and ensure no underage individual is permitted to deposit or wager on the platform.

2.3 Platform Improvement

• Analytics: Aggregated and anonymised gaming activity and device data is used to understand how players interact with ae7, identify areas for improvement, and optimise the mobile experience for players across Dhaka, Chittagong, Sylhet, and other regions of Bangladesh.
• Technical performance: Device and session data helps our engineering team diagnose and resolve technical issues, including game disconnections, payment processing delays, and page load performance.

Section 3

Data Sharing & Third Parties

ae7 does not sell or commercially trade your personal data. We share data with third parties only in the limited circumstances described below, and only to the minimum extent required to fulfil the stated purpose.

3.1 Permitted Data Sharing

• Payment processors: Transaction data is shared with bKash, Nagad, Rocket, Upay, and partnered Bangladeshi banks (BRAC Bank, City Bank, Dutch-Bangla Bank, Islami Bank, Sonali Bank) solely to execute deposit and withdrawal instructions you initiate. Each payment provider operates under its own privacy framework and data security standards.
• Game providers: When you play a live casino game powered by Evolution Gaming or Ezugi, or a slot title from Pragmatic Play, NetEnt, Microgaming, or Spribe, your session data (bet amounts, game outcomes) is transmitted to that provider's game servers. This is technically necessary to deliver the game. No personally identifiable data beyond a pseudonymous session ID is shared with game providers.
• KYC verification services: In certain circumstances, ae7 may engage a third-party identity verification service to assist with document validation. Any such provider is contractually bound to process your documents solely for verification purposes and to delete them upon completion of the verification task.
• Legal and regulatory disclosures: ae7 will disclose personal data to law enforcement agencies, courts, or regulatory bodies when required to do so by a valid legal obligation, court order, or anti-money laundering (AML) investigation. ae7 will notify you of such disclosures where legally permitted to do so.

3.2 No Third-Party Marketing Sharing

ae7 does not share your contact details (mobile number, email address) with third-party advertisers, affiliate marketing networks, or data brokers for any commercial purpose. If you receive unsolicited communications purporting to be from ae7 offering promotions through channels you did not subscribe to, please report this to [email protected] immediately, as this may indicate a phishing attempt.

Section 4

Cookies & Tracking Technologies

ae7 uses cookies and similar local storage technologies to maintain session continuity and deliver a functional, personalised experience on ae7.bio. We do not use third-party advertising cookies or cross-site tracking technologies.

You may delete functional and analytics cookies at any time through your browser's settings menu. Deleting essential or security cookies will log you out of your ae7 session and may impair the platform's ability to protect your account. ae7 does not use Flash cookies, pixel tracking tags from advertising networks, or fingerprinting scripts from third-party data brokers.

Section 5

Data Security & Storage

Protecting the personal data of ae7 players is a core operational commitment. ae7 employs a layered security architecture to safeguard data at rest, in transit, and during processing.

• Encryption in transit: All data transmitted between your browser or mobile device and ae7.bio is encrypted using TLS 1.3 with 256-bit AES cipher suites. Connections over older, insecure protocols are automatically rejected.
• Encryption at rest: Sensitive data fields — including KYC document files, NID images, passport scans, and financial transaction records — are encrypted at rest in ae7's database infrastructure using AES-256 encryption.
• Access controls: Access to personal data within ae7's internal systems is restricted on a strict need-to-know basis. Only compliance, finance, and senior support staff have access to KYC documents, and all access events are logged for audit purposes.
• Server infrastructure: ae7 servers are hosted in secure data centres with physical access controls, redundant power systems, and continuous uptime monitoring. Servers are not accessible from the public internet except through hardened, authenticated API endpoints.
• Penetration testing: ae7 conducts periodic security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data security incident that affects player personal data, ae7 will notify affected players within 72 hours of becoming aware of the breach via the mobile number registered to the affected account.

Section 6

Data Retention

ae7 retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The following retention schedule applies to all data categories collected by ae7.

When data reaches the end of its retention period, ae7 securely deletes or permanently anonymises it so that it can no longer be associated with any individual player. Deletion requests submitted by players under the right to erasure (see Section 7) will be assessed against applicable legal retention obligations — data that must be retained for AML or financial audit purposes cannot be deleted early, but will be isolated from active processing and flagged for deletion at the earliest legally permissible date.

Section 7

Your Privacy Rights

As an ae7 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, submit a written request to ae7 support. We will acknowledge your request within 3 business days and respond in full within 10 business days.

• Right of access: You may request a full summary of the personal data ae7 holds on your account, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared. ae7 will provide this summary free of charge.
• Right to rectification: If any personal data ae7 holds about you is inaccurate or incomplete, you may request that it be corrected. For example, if your registered name contains a spelling error, contact support with the corrected version and a copy of your ID confirming the correct spelling.
• Right to erasure: You may request that ae7 delete your personal data. ae7 will honour erasure requests where data is no longer necessary for its original purpose and where no legal retention obligation overrides the request. Data subject to AML, financial audit, or fraud investigation obligations cannot be deleted before the applicable retention period expires.
• Right to restrict processing: You may request that ae7 restrict the processing of your personal data to storage only, pending the resolution of a dispute about data accuracy or a pending erasure request.
• Right to data portability: You may request a machine-readable export of your personal data (registration details, transaction history, gaming activity logs) in CSV or JSON format, which you may then transfer to another service of your choosing.
• Right to object: You may object to ae7 using your data for purposes beyond core account operations — for example, if you wish to opt out of promotional SMS communications, contact support and we will update your communication preferences within 24 hours.
• Right to withdraw consent: Where ae7 has relied on your consent as the basis for processing (for example, for optional analytics cookies), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

Section 8

Changes to This Policy

ae7 reserves the right to update or revise this Privacy Policy at any time. Changes may be made to reflect updates to our platform features, shifts in applicable data protection standards, or modifications to our third-party service provider relationships.

When material changes are made to this Privacy Policy — particularly changes that affect how we collect, use, or share your personal data — ae7 will notify registered players via an alert displayed upon next login, or via SMS to the mobile number registered to your ae7 account. The updated policy will be published at ae7.bio/privacy-policy with a revised effective date at the top of this page.

Continued use of ae7.bio following the notification of a Privacy Policy update constitutes your acceptance of the revised terms. If you do not agree with the changes, you should stop using ae7 and may request account closure and data deletion by contacting ae7 support.

Previous versions of this Privacy Policy are archived and available upon request. To obtain a copy of a prior version, contact ae7 support specifying the date range for which you require the historical policy.