Privacy Policy — How azs7 Protects Your Personal Data

1 Introduction

azs7 is committed to handling your personal data with care, transparency, and integrity. We recognise that players entrust us with sensitive information — including identity documents, financial transaction records, and gameplay histories — and we take that responsibility seriously. This Policy is designed to give you a complete and honest picture of our data practices so that you can make informed decisions about your use of the azs7 platform.

This Policy applies to all personal data processed in connection with your use of the azs7 platform, including data collected during account registration, deposit and withdrawal transactions, customer support interactions, and general platform navigation. It does not apply to data practices of third-party service providers whose own privacy policies govern their respective data handling.

2 Data Controller

For the purposes of applicable data protection law, the data controller responsible for your personal data processed through the azs7 platform is the entity operating azs7.io. All data-related enquiries, access requests, and complaints may be directed to our support team at the contact details provided in Section 15 of this Policy.

Where azs7 engages third-party service providers to process personal data on our behalf (for example, payment processors or identity verification providers), those entities act as data processors and are contractually bound to process data only in accordance with azs7's documented instructions and applicable data protection requirements.

3 Data We Collect

The categories of personal data that azs7 may collect and process include, but are not limited to, the following:

Data Category	Examples	Purpose
Identity Data	Full name, date of birth, nationality, government-issued ID number, photograph	Account registration, age and identity verification (KYC), fraud prevention
Contact Data	Mobile number, email address, residential address	Account communications, security alerts, support correspondence
Financial Data	bKash/Nagad/Rocket/Upay account references, transaction IDs, deposit and withdrawal amounts in ৳ BDT	Payment processing, withdrawal verification, anti-money-laundering compliance
Technical Data	IP address, device type, browser type, operating system, session timestamps	Security monitoring, fraud detection, platform performance optimisation
Usage Data	Pages visited, games played, bet histories, session durations, feature interactions	Responsible gaming monitoring, product improvement, personalisation
Communications Data	Records of support chat or email correspondence, complaint submissions	Customer support, dispute resolution, regulatory record-keeping
Verification Documents	Scanned copies of national ID card, passport, utility bills, bank statements	Enhanced identity verification, source-of-funds checks

4 How We Collect Data

azs7 collects personal data through the following channels:

• Direct Interactions: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting customer support, or responding to surveys and promotional activities.
• Automated Technologies: Data collected automatically when you interact with the azs7 platform, including cookies, server logs, device fingerprinting, and analytics tools that record technical and usage data as described in Section 10.
• Third-Party Sources: Data received from identity verification providers, fraud screening services, payment processors (including bKash, Nagad, and Rocket), and publicly available sources where such data is used to verify your identity or assess fraud risk.
• Responsible Gaming Monitoring: Behavioural data generated through your gameplay activity that is analysed automatically and by our responsible gaming team to identify patterns that may indicate problematic gambling behaviour, in accordance with our duties under our Responsible Gaming commitments.

5 Purposes & Legal Bases for Processing

We process your personal data only where we have a valid legal basis for doing so. The primary purposes for which azs7 processes personal data, together with the corresponding legal basis for each, are set out below:

• Account Creation and Service Delivery: Processing is necessary for the performance of the contract between you and azs7, specifically to create and maintain your account and to provide access to betting and casino services.
• Identity Verification (KYC): Processing is necessary to comply with our legal obligations to verify player identities, prevent underage gambling, and conduct anti-money-laundering checks in accordance with applicable regulations.
• Payment Processing: Processing of financial data is necessary for the performance of the contract, to execute deposit and withdrawal instructions submitted by you.
• Fraud Prevention and Security: Processing is carried out on the basis of our legitimate interests in protecting the platform, our players, and third parties from fraudulent activity, account compromise, and abuse.
• Responsible Gaming Monitoring: Processing is carried out on the basis of our legal obligations and legitimate interests in identifying and supporting players who may be experiencing gambling-related harm.
• Customer Support: Processing of communications data is necessary for the performance of the contract and our legitimate interest in resolving player queries and disputes effectively.
• Platform Improvement and Analytics: Processing of usage and technical data is carried out on the basis of our legitimate interests in improving the performance, reliability, and user experience of the azs7 platform.
• Marketing Communications: Where you have provided explicit consent to receive promotional communications from azs7, we may use your contact data to send relevant offers and platform updates. You may withdraw this consent at any time by contacting us at [email protected].

6 Data Sharing

azs7 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. We may share your personal data with third parties only in the following circumstances:

• Payment Service Providers: We share necessary financial data with payment processors including bKash, Nagad, Rocket, Upay, and card network partners (Visa, Mastercard) solely for the purpose of executing your payment instructions.
• Identity Verification Providers: We engage accredited KYC and identity verification service providers to assist with the verification of player identities and documents. These providers process data strictly under our instruction.
• Fraud Prevention and Security Partners: We may share technical and behavioural data with specialist fraud detection and cybersecurity providers to protect the integrity of the platform.
• Game Software Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (such as session tokens) necessary to deliver their game content through the azs7 platform. These providers are not permitted to use this data for any other purpose.
• Legal and Regulatory Disclosures: We may disclose personal data to competent authorities, courts, or regulators where we are legally required to do so, including in connection with investigations into money laundering, fraud, or other criminal activity.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of the azs7 business, personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections being maintained.

7 International Data Transfers

Some of the third-party service providers used by azs7 may be located in or operate from jurisdictions outside Bangladesh. Where personal data is transferred internationally, azs7 takes appropriate measures to ensure that such transfers are conducted lawfully and that your data receives a level of protection equivalent to that provided under this Policy. These measures may include contractual safeguards, standard data protection clauses, and assessments of the receiving country's data protection framework.

By using the azs7 platform, you acknowledge that your personal data may be processed in countries outside Bangladesh, including countries whose data protection laws may differ from those in your home jurisdiction.

8 Data Retention

azs7 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law. Our general retention approach is as follows:

• Account and Identity Data: Retained for the duration of your account relationship with azs7 and for a period of at least five (5) years following account closure, in accordance with anti-money-laundering record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required for financial compliance and dispute resolution purposes.
• Communications Data: Customer support correspondence is retained for a period of three (3) years following the resolution of the relevant query or complaint.
• Technical and Usage Data: Log files and session data are retained for up to twelve (12) months, after which they are anonymised or deleted unless required for ongoing fraud investigations.
• Marketing Consent Records: Records of your marketing consent or opt-out are retained for the duration of your account relationship and for a reasonable period thereafter as evidence of compliance.

Upon expiry of the applicable retention period, personal data is securely deleted using industry-standard data destruction methods, or irreversibly anonymised such that it can no longer be associated with you as an identifiable individual.

9 Security Measures

azs7 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the azs7 platform.
• Encrypted storage of sensitive data, including identity documents and financial records, within access-controlled server environments.
• Multi-factor authentication requirements for internal staff accessing player account data.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Strict role-based access controls ensuring that only authorised personnel with a legitimate operational need can access personal data.
• Incident response procedures that ensure prompt identification, containment, and reporting of any data security incident, including notification to affected players where required by applicable law.

While azs7 takes all reasonable precautions to safeguard your data, no system connected to the internet can be guaranteed to be completely immune from security threats. Players are also responsible for maintaining the security of their own azs7 account credentials.

10 Cookies & Tracking Technologies

azs7 uses cookies and similar tracking technologies to enhance platform functionality, maintain session security, and analyse platform usage. The categories of cookies we use are described below:

• Strictly Necessary Cookies: These cookies are essential for the basic operation of the azs7 platform. They enable you to navigate the site, maintain your login session, and access secure areas. These cookies cannot be disabled without significantly impairing platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised or aggregated data about how players interact with the platform — such as which pages are visited most frequently and how users navigate between sections — to help us identify and resolve usability issues.
• Functionality Cookies: These cookies remember your preferences (such as language settings and display preferences) to provide you with a more personalised experience on return visits.
• Security Cookies: These cookies support fraud detection and authentication processes, helping us identify and block suspicious login attempts or unusual account activity.

azs7 does not use advertising cookies or behavioural targeting cookies that track your activity across third-party websites. You may manage cookie preferences through your browser settings, though disabling certain categories of cookie may affect the functionality of the platform.

11 Your Data Rights

Subject to applicable law and certain statutory exceptions, you have the following rights in relation to the personal data held about you by azs7:

• Right of Access: You may request a copy of the personal data that azs7 holds about you, along with information about how it is processed.
• Right of Rectification: You may request that inaccurate or incomplete personal data held by azs7 be corrected or completed.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to Restriction of Processing: You may request that azs7 restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being verified.
• Right to Data Portability: Where processing is based on your consent or contract performance, you may request that azs7 provide your personal data in a commonly used, machine-readable format.
• Right to Object: You may object to processing of your personal data carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring purposes, where you have grounds relating to your particular situation.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please submit a written request to [email protected]. azs7 will respond to all verified requests within 30 days of receipt. We may request proof of identity before processing a data rights request to ensure we do not disclose personal data to an unauthorised party.

12 Minors

The azs7 platform is strictly intended for use by individuals aged 21 years and above. azs7 does not knowingly collect or process personal data relating to individuals under the age of 21. If we become aware that personal data belonging to a person under the age of 21 has been collected, we will take immediate steps to delete that data and close the associated account. Parents or guardians who have reason to believe that a minor has registered on the azs7 platform are encouraged to contact us immediately at [email protected].

13 Third-Party Links

The azs7 platform may contain references to or integrations with third-party game providers, payment gateways, and other service partners. Where the platform directs you to interact with a third-party service, that service's own privacy policy will govern the collection and use of any data you provide to them directly. azs7 is not responsible for the privacy practices of third-party services and encourages players to review the relevant third-party privacy policies before providing personal data to those services.

14 Changes to This Policy

azs7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will notify registered players by displaying a prominent notice on the platform and, where practicable, by sending a notification to your registered contact details. The "Last Updated" date at the top of this Policy will be revised accordingly. Your continued use of the azs7 platform following the publication of an updated Policy constitutes your acknowledgement of the changes. We encourage you to review this Policy periodically.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data held about you by azs7, please contact our data team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Response time: We aim to acknowledge all privacy-related enquiries within 48 hours Bangladesh Standard Time (BST, UTC+6) and to provide a substantive response within 30 calendar days.
• Language: Communications are handled in English.

For questions about responsible gaming tools and self-exclusion options, please also visit our dedicated Responsible Gaming page.