wha7 Privacy Policy

1. Information We Collect

wha7 collects personal information from you when you register an account, use platform features, make deposits or withdrawals, contact support, or interact with our promotional communications. The categories of information we collect are described below.

1.1 Registration and Identity Data

When you open a wha7 account, we collect the information you provide in the registration form, including:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you are at least 18 years of age).
• Residential address in Bangladesh (city, district, and full postal address).
• Mobile phone number registered in Bangladesh.
• Email address.
• Username and password chosen at registration (password stored in irreversibly hashed form — never as plain text).

1.2 Identity Verification (KYC) Documents

As part of our mandatory Know Your Customer process, we may collect copies of identity documents including your National Identity Card (NID), Passport, or Driving Licence, as well as proof of address and proof of payment method ownership. These documents are used solely for the purpose of verifying your identity in accordance with our Terms & Conditions and applicable anti-money laundering obligations.

1.3 Transaction and Payment Data

When you make deposits or request withdrawals on wha7, we collect transaction-related information including:

• Payment method type (bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard).
• Mobile wallet number or bank account details associated with your payment method.
• Transaction amounts in Bangladeshi Taka (৳), timestamps, and reference numbers.
• Transaction status and any error or decline codes returned by the payment provider.

wha7 does not store full card numbers on its own servers. Card payment data is handled directly by PCI-DSS compliant payment processors.

1.4 Gameplay and Betting Activity Data

We maintain records of your activity on the wha7 platform, including:

• Bets placed, wagering amounts, game selections, and outcomes.
• Session start and end times, session duration, and login frequency.
• Responsible gaming tool selections (deposit limits, session reminders, self-exclusion requests).
• Bonus and promotional offer claims and wagering progress.

This activity data is used to operate the platform, detect fraud, comply with responsible gaming obligations, and personalise your experience where you have consented to such personalisation.

1.5 Technical and Device Data

When you access wha7 through a web browser or mobile device, we automatically collect certain technical information:

• IP address and approximate geographic location derived from it.
• Browser type, version, and operating system.
• Device type, screen resolution, and language settings.
• Referring URL and pages visited within wha7 during your session.
• Cookie identifiers and session tokens (see the Cookies section for full details).

1.6 Communications Data

If you contact wha7 via live chat, email, or any other support channel, we retain a record of those communications — including the content of messages, timestamps, and the support agent's responses. This data is used to resolve your query, train support staff, and maintain a service history for your account.

2. How We Use Your Data

wha7 processes your personal data only where we have a lawful basis for doing so. The primary purposes for which we use your data are set out below, alongside the corresponding legal basis for each processing activity.

2.1 Marketing Communications

Where you have provided consent at registration or at a later point, wha7 may contact you by SMS, email, or in-platform notification with promotional offers, bonus announcements, and information about new games and features. You may withdraw your consent to marketing communications at any time without affecting your right to continue using the platform. To opt out, visit your account notification settings or contact support via live chat.

2.2 Automated Decision-Making

wha7 uses automated systems for fraud screening and responsible gaming risk assessment. These systems may flag accounts for review or apply temporary restrictions based on behavioural patterns. Where an automated process results in a significant decision affecting your account — such as a temporary suspension pending fraud review — you have the right to request a manual review by a wha7 compliance team member. Contact [email protected] to exercise this right.

3. Data Sharing and Disclosure

wha7 does not sell, rent, or trade your personal data to third-party advertisers or data brokers. We share your data only in the limited circumstances described in this section.

3.1 Payment Processors

To process your deposits and withdrawals, wha7 shares necessary transaction data with our payment processing partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card processing networks. Data shared with payment processors is limited to the minimum required to execute the transaction and is governed by the payment processor's own privacy and security standards.

3.2 Game Content Providers

wha7 integrates games provided by third-party game studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. These providers may receive anonymised session and gameplay data necessary to deliver and maintain their games within the wha7 platform. Game providers do not receive your full personal profile or payment details.

3.3 Identity Verification Services

To fulfil KYC obligations, wha7 may share your identification documents and personal details with third-party identity verification service providers. These providers are contractually bound to use your data solely for the purpose of completing verification on behalf of wha7 and may not use or retain your data for any other purpose.

3.4 Legal and Regulatory Disclosure

wha7 may disclose personal data to law enforcement authorities, financial intelligence units, or other regulatory bodies where required to do so by applicable law, court order, or where wha7 reasonably believes disclosure is necessary to prevent fraud, money laundering, or harm to individuals. wha7 will notify affected players of any such disclosure where it is legally permitted to do so.

3.5 Business Transfers

In the event that wha7 undergoes a merger, acquisition, or sale of all or a substantial part of its assets, player data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified of any such transfer and of any changes to the applicable privacy terms.

4. Cookies and Tracking Technologies

wha7 uses cookies and similar tracking technologies on its platform to ensure the site functions correctly, to remember your preferences, and to gather analytics data that helps us understand how players use the platform and where improvements can be made.

4.1 What Are Cookies?

A cookie is a small text file that a website places on your device when you visit. Cookies are widely used across the internet to make websites work efficiently and to provide information to site operators. Cookies do not contain executable code and cannot install software on your device.

4.2 Types of Cookies We Use

4.3 Managing Cookies

You may control and delete cookies through your browser settings. Disabling strictly necessary cookies will prevent you from logging in and using the wha7 platform. Disabling functional or analytics cookies will not prevent you from accessing the platform but may affect certain preference-based features. Detailed instructions for managing cookies are available in your browser's help documentation.

5. Data Security and Retention

5.1 Security Measures

wha7 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• SSL/TLS Encryption: All data in transit between your device and wha7 servers is encrypted using current-generation SSL/TLS protocols.
• Password Hashing: Account passwords are stored using a one-way cryptographic hashing algorithm. wha7 staff cannot retrieve your password in plain text — only you know it.
• Access Controls: Internal access to player data is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access controls and audit logging.
• Intrusion Detection: Our platform is monitored continuously for suspicious access patterns, attempted breaches, and anomalous activity using automated detection systems.
• Secure Data Centres: Player data is stored on servers maintained in secure, access-controlled facilities with redundant backups and disaster recovery provisions.

5.2 Data Retention

wha7 retains your personal data for as long as your account is active and for a period thereafter as required by applicable legal, regulatory, and anti-money laundering obligations. Specific retention periods that apply to different categories of data are as follows:

• Account and identity data: Retained for the duration of account activity plus a minimum of five years following account closure, in accordance with standard financial record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Support communications: Retained for two years from the date of the communication, or longer if the communication relates to an ongoing dispute or investigation.
• KYC documents: Retained for five years following account closure or the completion of the verification process, whichever is later.
• Analytics and session data: Anonymised and retained for up to 24 months for platform improvement purposes.

Once the applicable retention period has expired and there are no outstanding legal or regulatory grounds for continued retention, your personal data will be securely deleted or irreversibly anonymised.

5.3 Data Breach Response

In the event of a personal data breach that poses a risk to your rights or interests, wha7 will take immediate steps to contain the breach, assess its scope and impact, and notify affected players without undue delay. Notification will be provided via the email address registered on your account and will include a description of the breach, the categories of data affected, and the steps we are taking to address it.

6. Your Privacy Rights

As a wha7 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via 24/7 live chat or by emailing [email protected]. We will respond to all verified requests within 30 days.

6.1 Right of Access

You have the right to request a copy of the personal data that wha7 holds about you. Upon receiving a verified access request, we will provide you with a summary of the data categories we hold, the purposes for which it is processed, and a copy of the data itself in a commonly used format.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain information (such as your email address or contact number) directly from your account settings. For corrections to core identity data, please contact support and provide the relevant supporting documentation.

6.3 Right to Erasure

Subject to applicable legal retention obligations, you may request that wha7 delete your personal data. We will honour such requests where the data is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. Note that we may be required by law to retain certain records even after you request erasure — we will inform you of any such restrictions when responding to your request.

6.4 Right to Restrict Processing

You may request that wha7 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing and a determination on that objection is pending. While a restriction is in place, we will only store your data and will not carry out any further processing without your consent, except for legal claims or the protection of others' rights.

6.5 Right to Data Portability

Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to request that it be transmitted to another service provider where technically feasible.

6.6 Right to Object

You have the right to object to the processing of your personal data where that processing is based on our legitimate interests, including profiling for marketing purposes. Where you object to marketing processing, we will cease that processing immediately. Where you object to processing based on legitimate interests for other purposes, we will review your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

7. Third-Party Services

The wha7 platform integrates third-party game content and payment services as described in this policy. Each third-party provider operates under its own privacy terms and security standards. wha7 selects its technology partners carefully and requires all partners to maintain a standard of data protection consistent with the principles set out in this Privacy Policy.

7.1 Game Provider Data Practices

Third-party game studios whose titles are accessible through wha7 — including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe — may process anonymised gameplay session data necessary to deliver their games. These providers are not permitted to use such data for independent marketing, profiling, or any purpose other than game delivery and technical maintenance under their contract with wha7.

7.2 Payment Provider Data Practices

Payment service providers including bKash, Nagad, Rocket, and Upay process your transaction data under their own published privacy terms, which you should review independently. wha7 shares only the minimum data required to complete each payment transaction and has no control over the payment provider's independent data practices once data has been transmitted.

7.3 No Social Media Plugins or External Trackers

wha7 does not embed social media sharing buttons, third-party advertising pixels, or external tracking scripts on its platform. The platform is a self-contained environment and does not transmit browsing behaviour data to social networks or advertising platforms.

8. Policy Updates and Contact

8.1 Updates to This Policy

wha7 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will notify registered players via email and by displaying a prominent notice on the wha7 platform for a minimum of 14 days following the update. The effective date at the top of this page will be updated to reflect the date of the most recent revision. Continued use of the wha7 platform following notification of a material change constitutes your acceptance of the updated Privacy Policy.

8.2 Contact Us

If you have any questions about this Privacy Policy, wish to exercise a privacy right, or have a concern about how wha7 handles your personal data, please contact our Data Support team using the details below:

• Email: [email protected]
• Live Chat: Available 24/7 via the wha7 platform
• Response Time: We aim to respond to all privacy-related enquiries within 5 business days and to complete substantive requests within 30 days.

For related policies that govern your use of wha7, please also review our Terms & Conditions and Responsible Gaming page.