dhk7 Privacy Policy

1. Who We Are

dhk7 is an online casino and sports betting platform accessible at https://dhk7.io, operated for players primarily based in Bangladesh. The platform offers a range of gaming and wagering services including live casino games, slots, table games (including Blackjack MH and European Roulette), and cricket betting markets.

For the purposes of this Privacy Policy, dhk7 is the data controller responsible for determining how and why your personal data is processed. If you have any questions or concerns about the way dhk7 handles your data, you can reach the data team directly at [email protected]. All enquiries are handled in English and responded to within 72 hours Bangladesh Standard Time (BST, UTC+6).

2. Data We Collect

dhk7 collects the following categories of personal data in connection with your use of the platform:

dhk7 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, except where disclosure is made voluntarily by a player in connection with a responsible gaming self-exclusion request (e.g., disclosing a gambling-related health concern). Such data is handled with the highest degree of confidentiality.

3. How We Collect Data

dhk7 collects personal data through the following means:

• Direct provision: Data you supply when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a survey or promotion.
• Automated technologies: Technical and usage data collected automatically as you navigate the platform, including via cookies, server logs, session tracking, and analytics tools. See Section 7 for full details on cookies.
• Third-party sources: Identity verification data supplied by KYC and anti-fraud service providers when we carry out identity checks; payment confirmation data supplied by bKash, Nagad, Rocket, Upay, or other payment processors when processing your transactions.
• Publicly available sources: In limited circumstances, publicly available information (such as fraud watchlist databases) may be cross-referenced to verify identity or prevent financial crime.

4. Purposes & Legal Basis

dhk7 processes your personal data only where there is a valid legal basis to do so. The table below sets out the primary purposes for which we use your data and the corresponding legal basis in each case:

5. Sharing Your Data

dhk7 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data with the following categories of recipients where it is necessary to deliver our services or comply with legal obligations:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other payment processors require certain transactional and identity data to execute and verify your financial transactions.
• KYC and identity verification providers: Third-party services engaged to verify the authenticity of identity documents, confirm age eligibility, and conduct anti-fraud and anti-money laundering screening.
• Game providers: Software providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session-level technical data necessary to deliver and audit game outcomes.
• IT infrastructure and hosting providers: Secure cloud hosting and technical service providers who maintain the servers and infrastructure underpinning the dhk7 platform, operating under strict data processing agreements.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory authority, dhk7 may be obliged to disclose personal data to law enforcement agencies, financial intelligence units, or other government bodies.
• Professional advisers: Lawyers, accountants, auditors, and insurers who require access to certain data in the course of providing professional services to dhk7.

All third parties with whom dhk7 shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond that for which it was shared.

6. Payment Data

Financial data related to your deposits and withdrawals at dhk7 — including your bKash, Nagad, Rocket, or Upay account numbers and transaction identifiers — is treated with the highest level of sensitivity. This data is used exclusively to process your requested transactions, verify ownership of payment methods, and satisfy anti-money laundering record-keeping obligations.

dhk7 does not store complete payment instrument credentials (such as full mobile banking PINs or bank account passwords) on its own servers. Payment transactions are routed through the secure infrastructure of the respective payment provider, and dhk7 receives only the confirmation data necessary to credit or debit your platform account balance.

All withdrawals at dhk7 are processed to a payment account held in your verified name. This requirement exists to prevent financial crime and protect players against unauthorised withdrawals. Requests to process withdrawals to a third-party account will not be fulfilled under any circumstances.

7. Cookies & Tracking

The dhk7 platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure experience. A cookie is a small text file placed on your device when you visit the platform. Cookies do not contain executable code and cannot be used to access other data stored on your device.

dhk7 uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function correctly, including maintaining your login session, remembering your language preference, and enabling the cashier. These cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: Used to collect anonymised data about how players navigate the platform, which game categories are most popular, and where technical errors occur. This data helps dhk7 continuously improve the platform experience.
• Functional cookies: Store your preferences such as display settings, notification preferences, and responsible gaming tool configurations so that they persist between sessions.
• Marketing cookies: Used only where you have given explicit consent, to deliver relevant promotional content and measure the effectiveness of dhk7 marketing campaigns. You may withdraw consent for marketing cookies at any time via your account settings.

You can manage or delete cookies at any time through your browser settings. Note that disabling strictly necessary cookies may impair certain platform features. Your continued use of the dhk7 platform after reviewing this policy constitutes acknowledgement of our use of cookies as described above.

8. Data Retention

dhk7 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any overriding legal retention obligation. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in accordance with financial record-keeping and anti-money laundering obligations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable financial crime legislation.
• KYC verification documents: Retained for a minimum of five (5) years following the completion of the verification process or account closure, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the most recent interaction, unless the communication relates to a formal complaint or legal dispute, in which case it may be retained for longer.
• Marketing consent records: Retained for the duration of your consent plus two (2) years following withdrawal of consent, as evidence of compliance.
• Technical and usage logs: Retained for up to twelve (12) months for platform security and performance monitoring purposes, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any individual.

9. Your Rights

As a dhk7 player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request". dhk7 will respond within 30 days of receiving a valid request:

• Right of access: You have the right to request a copy of the personal data dhk7 holds about you, together with information about how it is used and who it has been shared with.
• Right to rectification: If any personal data dhk7 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information directly via your account settings.
• Right to erasure: In certain circumstances, you have the right to request deletion of your personal data. This right is subject to overriding legal obligations (such as anti-money laundering record-keeping requirements) that may require dhk7 to retain certain data regardless of your request.
• Right to restrict processing: You may request that dhk7 limit the ways in which your personal data is used, for example while a dispute about its accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that dhk7 provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring or marketing purposes.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Please note that some requests may require dhk7 to verify your identity before proceeding, to ensure that personal data is not disclosed to or altered by unauthorised parties.

10. Children's Privacy

The dhk7 platform is strictly intended for adults aged 21 years and above. dhk7 does not knowingly collect personal data from individuals under the age of 21. If dhk7 discovers that it has inadvertently collected data from a minor, that data will be deleted immediately and the associated account will be permanently closed without return of any deposited funds.

If you are a parent or guardian and believe that a minor in your care has created a dhk7 account or provided personal information to the platform without your consent, please contact [email protected] immediately. dhk7 treats such reports as a high-priority matter and will act promptly upon notification.

11. Data Security

dhk7 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and dhk7 servers.
• Encryption of sensitive data at rest within dhk7's database infrastructure.
• Role-based access controls ensuring that only authorised dhk7 personnel can access personal data, strictly on a need-to-know basis.
• Continuous server monitoring, intrusion detection systems, and automated anomaly alerts.
• Regular internal security audits and vulnerability assessments.
• Two-factor authentication options for player account login to provide an additional layer of protection beyond password credentials.
• Secure data processing agreements with all third-party processors who handle personal data on dhk7's behalf.

While dhk7 takes all reasonable precautions to safeguard your data, no internet-based platform can provide an absolute guarantee against all security threats. In the event of a personal data breach that poses a risk to your rights and freedoms, dhk7 will notify affected players promptly via their registered email address and take all appropriate remedial action without delay.

12. Third-Party Links

The dhk7 platform may contain references to third-party game providers, payment processors, or sports data providers. While dhk7 takes care to work only with reputable partners, this Privacy Policy applies solely to the dhk7 platform itself. dhk7 is not responsible for the privacy practices of any third-party services and encourages you to review the privacy policies of any third parties whose services you access in connection with your use of dhk7.

13. Policy Changes

dhk7 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform services. The effective date displayed at the top of this page will be updated whenever a new version is published.

Where changes are material — meaning they significantly affect how your personal data is collected, used, or shared — dhk7 will provide advance notice to all registered players via email at least seven (7) days before the revised policy takes effect. For minor clarifications or non-substantive edits, the updated policy may take effect immediately upon publication without prior notice.

Your continued use of the dhk7 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree to the revised policy, you should close your account before the effective date and contact [email protected] for assistance with any outstanding balance.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way dhk7 processes your personal data, please contact the dhk7 data support team using the details below. All communications are handled in English:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Data Rights Request" or "Privacy Enquiry"
• Live Chat: Available 24/7 via the chat widget on the dhk7 platform
• Response Time: Email enquiries are responded to within 72 hours Bangladesh Standard Time (BST, UTC+6). Formal data rights requests are responded to within 30 calendar days.

dhk7 is committed to resolving all privacy-related concerns fairly and promptly. If you feel that your concern has not been adequately addressed, you retain the right to escalate the matter to the relevant data protection authority or seek independent legal advice.