gita7 Privacy Policy

1. Introduction

gita7 ("we", "our", "us") operates the online casino and sports betting platform accessible at https://gita7.pro (the "Platform"). We are committed to protecting the personal information of every player who visits or registers on the Platform. This Privacy Policy sets out in clear, plain language exactly what personal data we collect, the purposes for which we process it, who we may share it with, how long we retain it, and the rights that are available to you as a data subject.

This Policy must be read together with our Terms & Conditions, which are incorporated herein by reference. By accessing the Platform or creating an account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you should not access or use the Platform.

2. Personal Data We Collect

We collect the following categories of personal data from players, either directly from you or automatically through your use of the Platform:

We do not collect special category data (such as health data, racial or ethnic origin, or religious beliefs) and we request that you refrain from providing such information through any Platform communication channel.

3. How We Use Your Personal Data

gita7 processes your personal data only for defined, legitimate purposes. We will not use your data in any way that is incompatible with the purposes described below:

• To create and manage your gita7 account, including verifying your identity and age through the KYC process and maintaining accurate account records.
• To process your financial transactions, including deposits via bKash, Nagad, and Rocket, and to manage withdrawal requests in a timely and secure manner.
• To deliver the gaming services available on the Platform, including live casino games, cricket betting, slots, and other entertainment products, and to personalise your experience where you have consented to such personalisation.
• To comply with our anti-money-laundering (AML) and fraud-prevention obligations, including monitoring transactions for unusual patterns and reporting suspicious activity to appropriate authorities where legally required.
• To administer bonuses, free spins, promotions, and loyalty programme benefits in accordance with the applicable bonus terms, and to detect and prevent bonus abuse.
• To fulfil our responsible gaming obligations, including monitoring gameplay for indicators of problem gambling and delivering deposit limits, session reminders, cooling-off periods, or self-exclusion tools upon request.
• To send you service-related communications (such as account confirmations, transaction receipts, and security alerts) and, where you have explicitly opted in, to send you promotional offers and news about gita7 games and events.

4. Legal Basis for Processing

gita7 relies on the following legal bases to process your personal data, depending on the specific activity:

• Contractual necessity — processing required to perform the contract between you and gita7, such as operating your account, processing transactions, and delivering game results.
• Legal obligation — processing required to comply with applicable anti-money-laundering, know-your-customer, age verification, and other regulatory obligations.
• Legitimate interests — processing for fraud detection, platform security, responsible gaming monitoring, and internal analytics, where these interests are not overridden by your fundamental privacy rights.
• Consent — processing for direct marketing communications and non-essential cookies, where you have freely given, specific, and informed consent that you may withdraw at any time.

5. Sharing Your Personal Data

gita7 does not sell or rent your personal data. We may, however, share your data with the following categories of third parties where doing so is necessary, proportionate, and consistent with this Privacy Policy:

• Payment service providers — bKash, Nagad, Rocket, Upay, and bank transfer operators — to process deposits and withdrawals on your behalf. These providers are contractually bound to handle your financial data securely and may not use it for any purpose other than payment processing.
• Game and technology providers — Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and other certified studios — who may receive limited technical data (such as session tokens) to authenticate gameplay and settle game results. These providers do not receive your identity or financial data.
• Regulatory and law enforcement authorities — where we are legally required to disclose data, for example in response to a court order, regulatory inquiry, or AML reporting obligation. gita7 will, where legally permissible, notify you of such a disclosure.
• Analytics and platform-optimisation service providers — who assist us in understanding how players use the Platform and improving site performance. These providers receive only anonymised or pseudonymised data where possible, and are bound by data processing agreements.

Any third party that receives your personal data under this clause is required, by contractual obligation, to maintain the confidentiality of that data and to use it solely for the purpose for which it was shared. gita7 remains responsible for the data shared with its processors and will take appropriate steps if a processor fails to comply.

6. Payment Data and KYC Verification

When you make a deposit or request a withdrawal, gita7 collects the mobile wallet number or bank account details associated with your payment method. Full card or account numbers are never stored on gita7 servers. Payment data is transmitted directly to the relevant payment provider using encrypted channels and is retained only to the extent required to maintain an auditable transaction history and to comply with anti-money-laundering regulations.

KYC verification requires you to submit a government-issued identification document (such as your National ID card or passport) and may require proof of payment method ownership. Documents submitted for KYC are stored securely, accessible only to authorised compliance personnel, and are not used for any purpose beyond identity verification and regulatory compliance. KYC documents are retained for a minimum of five years following account closure in accordance with applicable anti-money-laundering obligations.

7. Cookies and Tracking Technologies

gita7 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and gather analytics data. The following types of cookies are used:

You can manage cookie preferences through your browser settings at any time. Disabling essential cookies may affect your ability to use certain Platform features. gita7 does not use cookies to track your activity on third-party websites outside the Platform.

8. Data Retention

gita7 retains your personal data only for as long as is necessary to fulfil the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by applicable law. The primary retention periods applied are as follows: account data (including identity and contact data) is retained for the duration of your account and for a minimum of five years after account closure; financial transaction records are retained for a minimum of five years from the date of each transaction; KYC and due diligence documents are retained for a minimum of five years following account closure; usage and analytics data in anonymised form may be retained indefinitely for platform improvement purposes.

Where data is no longer required and no legal retention obligation applies, gita7 will securely delete or anonymise it. If you request deletion of your data, we will process that request within 30 days, subject to any retention obligations that legally require us to keep certain records. We will inform you of any data we are legally required to retain and the basis for retaining it.

9. Your Data Rights

As a player on the gita7 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected]. We will respond to all verified requests within 30 days:

1. Right of access — you may request a copy of the personal data gita7 holds about you, along with information about how it is processed and why.
2. Right to rectification — if any personal data we hold about you is inaccurate or incomplete, you have the right to ask us to correct or complete it without undue delay.
3. Right to erasure — also known as the right to be forgotten, you may ask us to delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to any legal retention requirements.
4. Right to restriction — you may ask us to suspend processing of your personal data in certain circumstances, for example while we verify the accuracy of data you have disputed.
5. Right to data portability — where processing is based on your consent or on a contract, you may ask us to provide your personal data in a structured, commonly used, machine-readable format.
6. Right to object — you may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, though we may be able to demonstrate compelling grounds to continue processing that override your objection.

gita7 will not charge a fee for exercising any of the above rights unless your request is clearly unfounded or excessive. Where we are unable to comply with a request, we will explain the reason in writing within the applicable response period.

10. Security Measures

gita7 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These include 256-bit SSL/TLS encryption on all data transmissions, encrypted storage of sensitive data at rest, role-based access controls limiting staff access to personal data on a strict need-to-know basis, regular security audits and penetration testing, and multi-factor authentication for administrative access to Platform systems.

Despite these measures, no method of transmission over the internet or method of electronic storage is completely secure. While gita7 takes all reasonable steps to protect your personal data, we cannot guarantee absolute security. If you believe your account has been compromised, you should change your password immediately and notify our support team without delay at [email protected].

11. Children's Privacy

The gita7 Platform is strictly restricted to individuals aged 21 years or older. We do not knowingly collect personal data from any person under the age of 21. If you are a parent or guardian and believe that a minor has registered an account or provided personal data on the Platform, please contact us immediately at [email protected]. Upon verification, we will delete all personal data associated with the minor's account without undue delay and permanently close the account in question.

12. Links to Third-Party Content

The gita7 Platform may reference or display content from third-party game studios and payment providers. gita7 is not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party service you interact with in connection with your use of the Platform. gita7 has no control over and accepts no liability for the content, privacy policies, or practices of any third-party platforms, websites, or services.

13. Changes to This Privacy Policy

gita7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. Where a material change is made, we will notify registered players via their registered mobile number or email address, or by displaying a prominent notice on the Platform, at least 7 days before the change takes effect.

Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. The date at the top of this page always reflects the date of the most recent revision. We recommend that you review this Policy periodically to stay informed of any changes.

14. Contact and Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to submit a complaint regarding our data processing practices, please contact the gita7 support team. We aim to respond to all privacy-related enquiries within 30 days of receipt. Our support team is available around the clock, seven days a week, during Bangladesh Standard Time peak hours.

Email: [email protected]