Privacy Policy — How shuvo7 Protects Your Data

We collect personal information in the following categories depending on how you interact with shuvo7:

a) Registration & Identity Data

• Full legal name and date of birth
• Email address and mobile phone number
• Residential address (city, district, country)
• Government-issued identification documents (national ID, passport) — collected only during mandatory identity verification (KYC) procedures
• Username and encrypted password hash

b) Financial & Transaction Data

• bKash, Nagad, Rocket, or Upay mobile wallet account numbers associated with your deposits and withdrawals
• Deposit amounts, withdrawal requests, and transaction timestamps
• Account balance history and wagering activity summaries

c) Technical & Device Data

• IP address and approximate geolocation (city/district level derived from IP)
• Device type, operating system, browser type and version
• Session duration, pages visited, features used, and click-path data
• Cookies and similar tracking technologies (see Section 6)

d) Communications Data

• Messages sent to our customer support team via email
• Feedback and complaints submitted through the platform
• Records of promotional communications sent to you and your opt-in/opt-out preferences

shuvo7 processes personal data only for legitimate, specified purposes. The table below outlines our primary processing activities and their legal basis:

We do not use automated decision-making processes (including profiling) that produce legal or similarly significant effects on players without human review. Where automated systems flag an account for fraud or bonus abuse, a member of our compliance team reviews the case before any account action is taken.

shuvo7 does not sell or rent personal data to third parties under any circumstances. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, and Upay receive the minimum transaction data required to process your deposits and withdrawals. Each processor operates under its own privacy and security policy.
• Game providers: Certified studios such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming receive a pseudonymous player identifier and session data necessary to deliver game services. They do not receive your name, address, or payment details.
• Identity verification services: Where third-party KYC tools are used to verify identity documents, those providers receive only the data required for the verification check and are contractually prohibited from using it for any other purpose.
• Law enforcement and regulatory bodies: We disclose personal data when required by applicable law, court order, or regulatory instruction. We will notify you of such a disclosure where legally permitted to do so.
• Service providers: Hosting, infrastructure, and analytics vendors operating under strict data processing agreements that prohibit secondary use of your data.

All third parties who receive personal data from shuvo7 are contractually bound to process that data only for the disclosed purpose and to maintain appropriate security standards.

shuvo7 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to the following retention guidelines:

• Active account data: Retained for the lifetime of your account plus a minimum of 5 years after account closure to satisfy anti-money laundering record-keeping obligations.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Identity verification documents: Retained for a minimum of 5 years after account closure or the last verified transaction, whichever is later.
• Customer support communications: Retained for 3 years from the date of the last communication.
• Marketing preferences and consent records: Retained for the duration of your account and for 2 years following account closure.
• Cookie and analytics data: Aggregated and anonymised after 13 months.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to any individual player.

As a player on shuvo7, you hold the following rights regarding your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request":

• Right of access: You may request a copy of the personal data we hold about you at any time.
• Right to rectification: You may ask us to correct inaccurate or incomplete personal data. Minor details (such as contact number) can be updated directly in your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations described in Section 4.
• Right to restriction: You may ask us to restrict processing of your data while a complaint or accuracy dispute is being resolved.
• Right to object: You may object to processing based on legitimate interests, including profiling for fraud detection purposes. We will assess and respond within 30 days.
• Right to withdraw consent: Where processing is based on your consent (such as marketing emails), you may withdraw consent at any time by using the unsubscribe link in any communication or by contacting support.
• Right to data portability: You may request a structured, machine-readable export of the personal data you have provided to shuvo7.

We aim to respond to all data rights requests within 14 business days. Where requests are complex or numerous, we may extend this period by up to a further 30 days and will notify you accordingly.

shuvo7 uses cookies and similar local storage technologies to operate the platform effectively. We use the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core functionality.
• Functional cookies: Remember your language preference, display settings, and recently visited game categories so you do not need to reconfigure them on each visit.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate the platform — which pages are visited most, where users drop off, and average session duration. This data informs product improvement decisions and is never linked back to individual players.

We do not use advertising cookies, social media tracking pixels, or cross-site behaviour tracking of any kind. You can manage cookie settings through your browser preferences at any time. Disabling analytics or functional cookies will not prevent you from using shuvo7 but may affect the quality of your experience.

shuvo7 employs a multi-layered technical and organisational security framework to protect your personal data:

• Encryption in transit: TLS 1.2 / 1.3 encryption on all connections between your device and our servers.
• Encryption at rest: Sensitive fields including identity documents, payment identifiers, and password hashes are encrypted in the database using AES-256.
• Access controls: Staff access to personal data is role-based and logged. Only personnel with a legitimate operational need may access identifiable player records.
• Penetration testing: The platform undergoes periodic security assessments by independent third parties to identify and remediate vulnerabilities.
• Incident response: In the unlikely event of a data breach affecting your rights and freedoms, shuvo7 will notify affected players without undue delay and take immediate steps to contain and assess the incident.

While we employ robust security practices, no system is entirely immune to risk. You are responsible for keeping your account password confidential and for logging out of shared devices after each session. If you suspect unauthorised access to your account, contact [email protected] immediately.

shuvo7 is strictly an adult gaming platform. We do not knowingly collect personal data from any individual under the age of 21. If we become aware that a person under 21 has registered an account and provided personal data, that account will be immediately closed, all data will be deleted, and any deposits will be returned to the original payment method subject to verification.

If you believe that a minor has registered on shuvo7, please contact us immediately at [email protected] so we can investigate and take appropriate action without delay.

shuvo7 primarily serves players located in Bangladesh and stores player data on servers operated in accordance with applicable security standards. In certain circumstances, personal data may be processed by service providers located outside Bangladesh — for example, where a game provider or infrastructure vendor operates internationally.

In such cases, shuvo7 ensures that appropriate contractual safeguards are in place to protect your data to a standard equivalent to that described in this Policy. We do not transfer personal data to jurisdictions with inadequate data protection standards without implementing compensating controls such as standard contractual clauses or equivalent measures.

shuvo7 may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or operational needs. When we make material changes, we will:

• Post the updated Policy on this page with a revised "Last updated" date.
• Send a notification to your registered email address at least 7 days before the changes take effect.
• Display a prominent in-platform notice for a period of no less than 14 days following publication.

Your continued use of shuvo7 after the effective date of any update constitutes your acceptance of the revised Policy. If you do not agree with the changes, you must stop using the platform and may request account closure by contacting [email protected].

For all privacy-related questions, data rights requests, complaints, or concerns, please contact the shuvo7 data team:

• Email: [email protected] (subject line: "Privacy Enquiry" or "Data Rights Request")
• Response time: We aim to acknowledge all privacy enquiries within 2 business days and provide a full response within 14 business days.
• Support hours: 24 hours a day, 7 days a week, including Bangladesh public holidays (Eid, Pohela Boishakh, Victory Day, Independence Day).
• Language: All official data rights communications are conducted in English.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority or seek independent legal advice.