bongo7 Privacy Policy

This Privacy Policy ("Policy") describes how bongo7 ("bongo7", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "your", "Player", "User") who access or use the bongo7 platform at bongo7.net and any associated mobile or web-based applications.

bongo7 is committed to safeguarding the privacy of all players across Bangladesh. We recognise that the personal and financial information you share with us in the course of registering and using the bongo7 platform is sensitive. This Policy sets out in plain English exactly what we do with that information, why we do it, and what controls you have over it.

This Policy should be read alongside the bongo7 Terms & Conditions and the Responsible Gaming Policy, both of which are available on this website. By registering an account on bongo7 or continuing to use the platform after this Policy has been updated, you acknowledge that you have read and understood its contents.

We reserve the right to update this Policy at any time. Material changes will be communicated to registered players through their registered contact details. The version published on this page at any given time is the currently operative version.

bongo7 collects personal data in two broad categories: data you provide directly and data we collect automatically when you use the platform.

Data You Provide Directly

Data Collected Automatically

When you access bongo7, certain technical data is collected automatically by our systems and third-party analytics providers:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, games played, bet amounts, session duration, click paths, and feature interactions within the platform.
• Location Data: Approximate geographic location derived from your IP address. We do not collect precise GPS-level location data.
• Cookie & Tracking Data: Session cookies, persistent cookies, and similar tracking technologies as described in Section 7 of this Policy.

bongo7 collects personal data through the following mechanisms:

• Direct interactions: Data you enter when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or using any feature of the platform that requires you to submit information.
• Automated technologies: When you browse bongo7, our servers automatically log technical data including your IP address, browser type, referring URL, and pages accessed. We also use cookies and similar technologies as described in Section 7.
• Payment processors: When you make a transaction via bKash, Nagad, Rocket, or Upay, those providers confirm the transaction outcome and your registered mobile number to our payment gateway. bongo7 does not receive your full mobile banking PIN or password at any point.
• Third-party game providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may share aggregated game-round data with bongo7 for settlement and dispute-resolution purposes.
• Fraud and security providers: We may receive data from third-party fraud-prevention services that help us detect and prevent account takeover, bonus abuse, and money laundering activity.

bongo7 uses your personal data only for the purposes described below. We do not process your data for any purpose that is incompatible with these stated purposes without first obtaining your explicit consent.

bongo7 processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and bongo7 — including account creation, payment processing, and game settlement — is carried out on the basis that it is necessary to deliver the services you have requested.
• Legal obligation: Certain processing activities — such as identity verification, record-keeping for anti-money-laundering purposes, and age verification — are carried out because bongo7 is required to do so to comply with applicable legal and regulatory obligations.
• Legitimate interests: bongo7 may process data on the basis of its legitimate business interests where those interests are not overridden by your rights and interests. This includes fraud prevention, security monitoring, and platform analytics. We conduct a balancing test before relying on this basis and document our reasoning.
• Consent: Where bongo7 relies on your consent as the legal basis for processing — for example, sending promotional communications — you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent will not affect the lawfulness of processing carried out prior to withdrawal.

bongo7 does not sell, rent, or trade your personal data to third-party marketing companies. Your data may be shared with carefully selected third parties only in the following circumstances and only to the extent strictly necessary:

• Payment service providers: bKash, Nagad, Rocket, and Upay receive only the transaction data necessary to process your deposit or withdrawal. These providers are bound by their own privacy policies and applicable financial regulations.
• Game content providers: Providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session tokens and bet data necessary to deliver game content and settle results. They do not receive your full identity or contact details.
• Fraud prevention and KYC services: Third-party identity verification and fraud-detection services may process limited personal data (typically name, date of birth, and identity document metadata) to verify your identity and detect suspicious activity.
• Technology and hosting providers: Cloud hosting, content delivery, and platform infrastructure providers may have access to encrypted data stored on their systems as part of providing hosting services. Such providers are contractually required to process data only on bongo7's instructions.
• Legal and regulatory authorities: bongo7 may disclose personal data to law enforcement, regulatory bodies, or other governmental authorities where required to do so by applicable law, court order, or regulatory directive.

bongo7 uses cookies and similar tracking technologies to operate the platform, improve your experience, and gather analytics data. A cookie is a small text file stored on your device by your browser when you visit a website.

Types of Cookies We Use

• Strictly necessary cookies: These cookies are essential for the platform to function. They manage your login session, remember your account preferences, and ensure that security features work correctly. These cookies cannot be disabled without preventing you from using the platform.
• Analytics cookies: We use aggregated analytics data to understand how players navigate the platform, which games are most popular, and where technical issues occur. This data is processed in anonymised or pseudonymised form wherever possible.
• Functional cookies: These cookies remember your preferences — such as language settings, display preferences, and last-visited game categories — to improve your experience on return visits.
• Security cookies: Used to detect and prevent fraudulent activity, including bot traffic and account takeover attempts.

Most browsers allow you to control cookie settings through your browser preferences. Blocking all cookies may impair your ability to log in to or use certain features of the bongo7 platform. Session cookies are deleted automatically when you close your browser. Persistent cookies expire after a defined period as specified in our cookie configuration.

bongo7 implements a layered security architecture to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bongo7 platform.
• Secure password hashing using industry-standard one-way cryptographic algorithms. bongo7 staff cannot retrieve your password in plain text under any circumstances.
• Access controls: Personal data is accessible only to bongo7 staff who require it to perform their specific role. Access is governed by role-based permissions and is logged for audit purposes.
• Infrastructure security: Our hosting environment uses firewalls, intrusion detection systems, and regular vulnerability scanning to protect against external threats.
• Incident response: bongo7 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected players promptly and take immediate steps to contain and remediate the incident.

bongo7 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. The following general retention guidelines apply:

• Account data (identity, contact, and credential data) is retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with anti-money-laundering record-keeping requirements.
• Transaction records (deposit and withdrawal history) are retained for a minimum of five (5) years from the date of each transaction.
• KYC documents (copies of identity documents submitted for verification) are retained for five (5) years following account closure or the end of the business relationship.
• Support communications (live chat logs, email correspondence) are retained for up to two (2) years from the date of the interaction, unless a longer period is required for an ongoing dispute or investigation.
• Analytics data is retained in anonymised or aggregated form for up to three (3) years for platform improvement purposes.

On expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data subject's identity.

bongo7 respects your rights over your own personal data. You may exercise the following rights by submitting a written request to [email protected]:

• Right of Access: You have the right to request a copy of the personal data bongo7 holds about you, together with information about how it is being processed. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You may also update certain information directly from within your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request that bongo7 delete your personal data. This right is subject to limitations where retention is required by law (for example, to comply with AML record-keeping requirements). Where we cannot fully erase your data, we will explain why and confirm what data is retained.
• Right to Restrict Processing: In certain circumstances, you may request that bongo7 restrict the processing of your data — for example, while the accuracy of data is being contested or while a complaint is under investigation.
• Right to Data Portability: Where processing is carried out on the basis of your consent or a contractual obligation, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: Where bongo7 processes your data on the basis of legitimate interests, you have the right to object to that processing. We will consider your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please email [email protected] with the subject line "Privacy Rights Request" and include your registered username and a clear description of your request. We may need to verify your identity before processing your request. We aim to acknowledge all requests within 48 hours and to provide a substantive response within 30 calendar days.

The bongo7 platform is strictly intended for adults aged 18 years and above. bongo7 does not knowingly collect, process, or retain personal data from any individual under the age of 18. If we become aware that a registered account belongs to a person under 18, that account will be immediately suspended, all balances will be frozen pending investigation, and all personal data associated with that account will be deleted in accordance with our data retention procedures.

If you are a parent or guardian and believe that a minor in your care has registered an account on bongo7, please contact [email protected] immediately so that we can take prompt action.

The bongo7 platform may contain references to game providers and payment partners. Where any third-party service operates under a separate privacy policy — such as bKash, Nagad, or individual game studios — bongo7 is not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of bongo7.

bongo7 does not include advertising links or affiliate links that would transfer your personal data to external marketing networks without your knowledge.

bongo7 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When we make material changes — such as introducing a new purpose for processing, engaging a new category of third-party processor, or modifying your rights — we will notify registered players through their registered mobile number or email address at least seven (7) days before the changes take effect.

The updated Policy will be published on this page with a revised effective date. Your continued use of the bongo7 platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using the platform and may request account closure by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bongo7 handles your personal data, please contact our support team through one of the following channels:

• Live Chat: Available 24/7 directly within the bongo7 platform. Connect with a support agent in real time from your account dashboard.
• Email: [email protected] — please use the subject line "Privacy Enquiry" and include your registered username. We aim to respond within 24 hours for standard queries and within five (5) business days for formal data subject requests.