geta7 Privacy & Data Protection Policy

geta7 is an online casino and sports betting platform serving players across Bangladesh, with a particular focus on providing a safe, enjoyable, and responsible gaming environment for adults aged 21 and above. We are committed to protecting your privacy and handling your personal data with the highest standards of security, transparency, and fairness.

This Privacy Policy applies to all personal data collected through the geta7 website at geta7.io, including data collected via account registration forms, identity verification submissions, payment transactions, customer support interactions, and general browsing of the platform. It also applies to data collected through any future mobile applications or related services operated under the geta7 brand.

This policy should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which form part of the complete agreement between you and geta7.

geta7 collects personal data in several categories depending on how you interact with our platform. The table below provides a clear summary of each data category, specific examples, and the purpose for which the data is collected.

geta7 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than identity document photographs required for KYC), or health data, unless explicitly required by law or with your express consent.

geta7 uses the personal data it collects strictly for the following purposes. We do not use your data in ways that are incompatible with the purposes listed below:

• Account Registration & Management: To create and maintain your geta7 account, verify your identity, manage your account settings and preferences, and provide you with access to the platform's features.
• Age & Identity Verification (KYC): To verify that you meet the minimum age requirement of 21 years and to confirm your identity in accordance with our anti-money laundering (AML) and know-your-customer (KYC) obligations. This is a legal requirement and cannot be opted out of.
• Payment Processing: To process deposits made via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to process withdrawal requests to your registered payment method. Financial data is shared with payment processors only to the extent necessary to complete transactions.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account takeover attempts, money laundering, bonus abuse, and other security threats to the geta7 platform and its players.
• Responsible Gaming Compliance: To monitor gameplay patterns and account activity for signs of problem gambling behaviour, to apply deposit limits, cooling-off periods, and self-exclusions requested by players, and to comply with responsible gaming obligations.
• Customer Support: To respond to enquiries, resolve disputes, investigate complaints, and provide general account assistance via our 24/7 English-language support team.
• Platform Improvement: To analyse aggregate, anonymised usage data to improve the geta7 platform's features, game selection, payment options, and user experience. This analysis uses anonymised data that cannot be used to identify individual players.
• Marketing Communications (with consent): To send promotional emails, bonus notifications, and tournament alerts to players who have opted in to receive marketing communications. You may withdraw consent to marketing at any time by contacting [email protected] or updating your account preferences.
• Legal & Regulatory Compliance: To meet obligations under applicable law, including responding to lawful requests from law enforcement or regulatory authorities, maintaining financial transaction records, and enforcing our Terms & Conditions.

Every instance of personal data processing by geta7 is carried out on one of the following legal bases. We process your data only when at least one valid legal basis applies:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you as a registered player — including account management, payment processing, game provision, and customer support.
• Legal Obligation: Processing required to comply with applicable law, including KYC/AML obligations, age verification requirements, and lawful requests from authorities.
• Legitimate Interests: Processing carried out in pursuit of geta7's legitimate business interests — such as fraud prevention, platform security, and service improvement — provided that those interests do not override your fundamental privacy rights.
• Consent: Processing based on your freely given, informed, and explicit consent — such as sending marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

geta7 does not sell, rent, or share your personal data with unaffiliated third parties for their own marketing purposes. We share personal data with third parties only in the following limited circumstances:

• Payment Processors: Financial data is shared with our payment processing partners — including the providers behind bKash, Nagad, Rocket, Upay, Visa, and Mastercard integrations — solely to facilitate your deposit and withdrawal transactions. These processors are contractually bound to use your data only for the purpose of completing the relevant transaction.
• Identity Verification Providers: Where automated KYC tools are used to verify identity documents, relevant identity data is transmitted to our KYC technology partner under strict data processing agreements. These providers act as data processors on geta7's behalf and may not use your data for their own purposes.
• Game Software Suppliers: Technical session data (such as player ID, session token, and stake amounts) is shared with game software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to operate their games within the geta7 platform. These providers do not receive your name, address, or payment details.
• Fraud Prevention & Security Services: Anonymised or pseudonymised technical data (such as IP addresses and device fingerprints) may be shared with fraud detection service providers to protect the platform against security threats.
• Legal & Regulatory Authorities: geta7 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, a valid court order, or where disclosure is necessary to protect the rights, safety, or property of geta7 or its players.
• Business Transfers: In the event of a merger, acquisition, or transfer of all or substantially all of geta7's assets to a third party, your personal data may be transferred as part of that transaction. You will be notified by email in advance of any such transfer that affects the processing of your personal data.

All third parties with whom geta7 shares personal data are required to maintain appropriate technical and organisational security measures and to process your data only in accordance with geta7's instructions and applicable data protection law.

geta7 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain session security, and analyse aggregate usage patterns. Cookies are small text files stored on your device when you visit geta7.io. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function correctly. These include session authentication cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without disrupting your ability to use the platform.
• Functional Cookies: Remember your preferences such as language settings, last-used payment method, and responsible gaming settings like session reminders. Disabling these cookies may reduce the convenience of your experience but will not prevent you from using the platform.
• Analytics Cookies: Collect anonymised data about how players interact with the geta7 website — including which pages are most visited, how long sessions last, and where users navigate from. This data is used in aggregate form only and cannot be used to identify individual players. Analytics cookies may be disabled without affecting core platform functionality.
• Security & Fraud Detection Cookies: Collect technical device fingerprint data used to detect suspicious login attempts, account takeover activity, and multi-accounting. These cookies are classified as strictly necessary for platform security purposes.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use the geta7 platform. Detailed browser-level instructions for managing cookies are available through the help documentation of major browsers including Google Chrome, Mozilla Firefox, Apple Safari, and Microsoft Edge.

geta7 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected or to comply with applicable legal, regulatory, or accounting requirements. The table below summarises our standard retention periods by data category:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked back to you as an individual. Where data is anonymised rather than deleted, the anonymised dataset may be retained indefinitely for statistical analysis purposes.

As a geta7 player, you hold the following rights with respect to the personal data we hold about you. To exercise any of these rights, submit a written request to [email protected]. geta7 will respond to all data rights requests within 30 calendar days of receipt. Requests will be verified against your account identity before any data is disclosed or deleted.

• Right of Access: You have the right to request a copy of all personal data that geta7 holds about you, along with information about how that data is used and with whom it has been shared.
• Right to Rectification: If any personal data geta7 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain profile details directly through your account settings.
• Right to Erasure: You have the right to request that geta7 delete your personal data, subject to legal retention obligations. Where data must be retained to comply with applicable law (for example, KYC and financial records), geta7 will inform you of the minimum retention period that applies before deletion can occur.
• Right to Restrict Processing: You have the right to request that geta7 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing based on legitimate interests and a determination is pending.
• Right to Data Portability: Where processing is based on your consent or on a contract, and processing is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object at any time to the processing of your personal data where that processing is based on geta7's legitimate interests. You also have an unconditional right to object to the use of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting [email protected] or updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

The geta7 platform is strictly intended for adults aged 21 years and above. geta7 does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the geta7 account registration and KYC process, and accounts belonging to individuals who cannot confirm they are 21 or older will be suspended pending verification.

If you have reason to believe that a person under the age of 21 has provided personal data to geta7 or has created an account on the platform, please contact us immediately at [email protected]. Upon receiving such a report, geta7 will investigate the matter promptly and, where confirmed, will permanently close the account and delete all associated personal data in accordance with our data retention obligations.

Parents and guardians are encouraged to make use of internet filtering tools and parental control software to prevent minors from accessing online gambling platforms. geta7 also recommends visiting the Responsible Gaming page for additional guidance on protecting young people from gambling-related harm.

geta7 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to the following:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and the geta7 platform is encrypted using industry-standard 256-bit SSL/TLS encryption. The padlock icon in your browser's address bar confirms that your connection to geta7.io is secure.
• Encrypted Data Storage: Personal data stored in geta7's databases is encrypted at rest using AES-256 encryption. Database access is restricted to a small number of authorised personnel and is protected by multi-factor authentication.
• Access Controls: Access to systems containing personal data is restricted on a strict need-to-know basis. All internal access events are logged, and access logs are reviewed regularly by our security team.
• Penetration Testing & Vulnerability Scanning: geta7's technical infrastructure is subject to regular penetration testing and automated vulnerability scanning to identify and remediate security weaknesses before they can be exploited.
• Incident Response Procedures: geta7 maintains a documented security incident response plan. In the event of a data breach that poses a risk to your rights and freedoms, geta7 will notify affected players without undue delay and take all reasonable steps to contain and remediate the incident.
• Staff Training: All geta7 personnel who handle personal data receive regular training on data protection obligations, secure data handling practices, and the procedures to follow in the event of a suspected security incident.
• Two-Factor Authentication (2FA): geta7 offers optional two-factor authentication for player accounts as an additional layer of security. Players are strongly encouraged to enable 2FA through their account security settings.

geta7 reserves the right to update or revise this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes to our data processing practices, new features introduced to the platform, or feedback from players and data protection advisors.

When material changes are made to this Privacy Policy — that is, changes that significantly affect the way we collect, use, or share your personal data — geta7 will notify registered players by email to their registered address at least 14 days before the updated policy takes effect. The updated policy will also be posted on this page with a revised effective date.

Minor or administrative changes (such as clarifications of existing wording, corrections of typographical errors, or updates to contact details) may be made without advance notice. The effective date displayed at the top of this page will always reflect when the current version of the policy was last updated.

Your continued use of the geta7 platform after any updated Privacy Policy has taken effect constitutes your acceptance of the revised terms. If you do not accept a revised Privacy Policy, you must stop using the platform and close your account by contacting [email protected] before the new policy takes effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way geta7 handles your personal data, please contact our support team using the details below. Our English-language support team is available 24 hours a day, 7 days a week.

Data rights requests (access, rectification, erasure, portability, restriction, and objection) must be submitted in writing to the email address below. Please include your registered account username, the email address associated with your account, a clear description of your request, and any relevant supporting information.

Data Rights & Privacy Enquiries: [email protected]

General Support: [email protected] (available 24/7 in English)

geta7 is committed to resolving all privacy-related concerns promptly and in good faith. If you submit a complaint and are not satisfied with geta7's response, you may have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.