asha7 Privacy Policy

asha7 ("we", "us", "our", "the Platform") is committed to protecting and respecting your privacy. This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. The Policy applies to all users of the asha7 website and associated services, including cricket betting, live casino, slots, and crash games, accessible at asha7.ws. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

By accessing or using any part of the asha7 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, please do not use the Platform. This Policy should be read together with our Terms and Conditions, which govern your use of the Platform.

When you register, use, or interact with the asha7 Platform, we may collect the following categories of personal data. We collect only the data that is necessary for the purposes described in this Policy:

asha7 uses the personal data we collect for clearly defined purposes. We will not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your explicit consent:

• To create and maintain your account, verify your identity (KYC), and ensure the integrity and security of the account registration process.
• To process your deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to maintain accurate financial records of all transactions associated with your account.
• To deliver the Platform's core services, including sports betting on cricket (BPL, IPL, T20 World Cup, Bangladesh Tigers), live casino, slots, and crash games, and to personalise your experience based on your betting history and preferences.
• To comply with applicable legal obligations, including anti-money laundering (AML) requirements, age verification obligations, and any reporting requirements imposed by competent authorities.
• To detect, investigate, and prevent fraud, money laundering, identity theft, bonus abuse, collusion, and any other prohibited conduct as defined in our Terms and Conditions.
• To monitor your gambling activity for responsible gaming purposes, including identifying signs of problem gambling and, where appropriate, prompting you to use deposit limits, session reminders, or self-exclusion tools.

asha7 does not use your personal data for automated decision-making that produces legal effects or similarly significant effects on you without human review. Where automated systems flag an account for compliance review, a human compliance officer reviews the matter before any adverse action is taken.

asha7 processes your personal data only where we have a valid legal basis for doing so. The legal bases we rely on for the processing activities described in this Policy are:

• Contract performance: Processing that is necessary to fulfil the contract we have with you, including account creation, transaction processing, and service delivery.
• Legal obligation: Processing that is necessary to comply with applicable laws, including AML requirements, age verification, and financial record-keeping obligations.
• Legitimate interests: Processing necessary for our legitimate interests in fraud prevention, platform security, responsible gaming enforcement, and improving the quality and performance of the Platform, provided these interests are not overridden by your rights.
• Consent: Where we send you optional marketing communications or use non-essential cookies, we will first obtain your explicit consent. You may withdraw consent at any time by contacting [email protected].

asha7 does not sell, rent, or trade your personal data. We may share your data with carefully selected third parties only in the circumstances described below:

• Payment processing partners: Mobile financial service providers (bKash, Nagad, Rocket, Upay) receive only the minimum transaction data required to process deposits and withdrawals. asha7 does not share your full identity data with payment partners beyond what is required by their own verification processes.
• Game providers and platform technology partners: Providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi receive session identifiers and game-level data necessary to deliver fair game outcomes and resolve disputes. These partners are contractually prohibited from using your data for their own marketing purposes.
• Compliance and law enforcement: Where required by applicable law, court order, or the request of a competent regulatory or law enforcement authority, asha7 may disclose your personal data. We will notify you of such disclosure where we are legally permitted to do so.
• Fraud prevention agencies: In cases where asha7 reasonably suspects fraudulent activity, money laundering, or identity theft, we may share relevant data with specialist fraud prevention services or financial intelligence bodies to protect the Platform and its users.

All third parties with whom we share data are contractually required to process that data only for the specified purpose, to apply appropriate technical and organisational security measures, and to delete the data when the purpose is fulfilled. asha7 remains responsible for the data it shares and audits third-party data handling practices periodically.

When you make a deposit or request a withdrawal using bKash, Nagad, Rocket, or Upay, asha7 receives a transaction reference and the last four digits of your registered mobile wallet number. Full wallet numbers are masked in our systems after the initial verification step. We do not store your bKash or Nagad PIN, OTP codes, or any authentication credentials used with your mobile financial service provider. These are entered directly into your provider's own secure interface and are never transmitted to or stored by asha7.

All financial transaction records associated with your account are retained for a minimum of five years in accordance with applicable financial record-keeping requirements. This retention period begins from the date of the last transaction on your account. Transaction records are stored in encrypted form and access is restricted to authorised compliance and finance personnel only.

asha7 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage patterns. We use three categories of cookies on the Platform:

• Essential cookies: These are strictly necessary for the Platform to function. They manage your login session, maintain your account security state, and remember your language preference. Essential cookies cannot be disabled without breaking core Platform functionality.
• Performance and analytics cookies: These cookies collect anonymised data about how users interact with the Platform — which pages are visited most, which games are most played, and where users experience errors. This information helps us improve the Platform's performance and user experience.
• Responsible gaming cookies: A specific subset of session cookies records your in-session gambling activity data (session duration, total staked, win/loss ratio) to power the responsible gaming monitoring tools described in this Policy. This data is associated with your account and is not anonymised.

asha7 does not use third-party advertising cookies, behavioural targeting cookies, or social media tracking pixels. You can manage or delete cookies through your browser settings at any time, though disabling essential cookies may prevent you from logging into your account.

asha7 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply: account data (identity, contact, financial records) is retained for a minimum of five years from the date of last account activity or account closure, whichever is later, in line with standard financial compliance requirements. Game session data and responsible gaming records are retained for three years from the date of the session. Communications data (support tickets, email correspondence) is retained for two years from the date of the last communication.

When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Where asha7 is required to retain data beyond the standard period due to an ongoing legal dispute, regulatory investigation, or court order, we will retain only the data strictly required for that purpose and will delete it as soon as the requirement lapses.

As an asha7 user, you have a number of rights in relation to your personal data. These rights are subject to certain conditions and limitations set out in applicable law, but asha7 is committed to facilitating the exercise of these rights in a straightforward and timely manner:

• Right of access: You have the right to request a copy of all personal data asha7 holds about you. We will provide this information within 30 calendar days of receiving a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. Identity data corrections may require you to submit updated KYC documentation.
• Right to erasure: You have the right to request the deletion of your personal data. We will fulfil erasure requests where there is no overriding legal obligation to retain the data. Note that financial transaction records must be retained for the minimum period required by applicable law and cannot be erased on request during that period.
• Right to restrict processing: You may ask us to suspend the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being verified or while a complaint is being investigated.
• Right to data portability: Where processing is based on your consent or the performance of a contract, and the processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing that is based on our legitimate interests. If you object, we will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where the processing is necessary for legal claims.

To exercise any of these rights, please contact our Data Protection team at [email protected]. Include your full name, registered email address, and a clear description of the right you wish to exercise. We will verify your identity before processing any rights request to prevent unauthorised access to your data. We aim to respond to all rights requests within 30 calendar days.

asha7 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include: AES-256 encryption for all data stored on our servers; SSL/TLS encryption for all data transmitted between your device and the Platform; role-based access controls that restrict access to personal data to authorised personnel only; regular penetration testing and vulnerability assessments carried out by independent security specialists; and multi-factor authentication requirements for all staff who have access to production systems containing personal data.

While asha7 employs industry-standard security practices, no online platform can guarantee complete security against all possible threats. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, asha7 will notify affected users as soon as reasonably practicable and will take immediate steps to contain and remediate the breach. If you suspect that your account has been compromised, please contact [email protected] immediately.

The asha7 Platform is strictly for persons aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe that a person under 21 has registered an account on asha7, please notify us immediately at [email protected]. Parents and guardians are encouraged to use parental control tools available on their devices and internet service providers to restrict access to online gambling platforms.

The asha7 Platform does not contain links to third-party websites, social media platforms, or external services that fall outside the Platform's own operational scope. The game content delivered by licensed game providers (Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and others) operates within embedded iframes on the Platform and is subject to the respective provider's own privacy practices. asha7 is not responsible for the data practices of individual game providers. We recommend reviewing the privacy policy of any game provider whose games you play if you have specific concerns about how your session data is handled at the provider level.

asha7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. When we make material changes to this Policy, we will notify registered users by email to the address associated with their account and by posting a prominent notice on the Platform prior to the updated Policy taking effect. The date at the top of this page will be updated to reflect the date of the most recent revision.

Your continued use of the Platform following any update to this Privacy Policy constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically. If the changes are material and you do not agree with them, you should stop using the Platform and close your account by contacting [email protected].

If you have any questions, concerns, or complaints about this Privacy Policy or about how asha7 handles your personal data, please contact our Data Protection team. We aim to respond to all privacy-related enquiries within 48 hours on Bangladesh Standard Time (BST, UTC+6) business days. For formal data rights requests (access, rectification, erasure, portability, objection), please include "Data Rights Request" in the subject line of your email.

Data Protection Contact: [email protected] — Please include your registered username, full name, and a clear description of your query. All correspondence is handled confidentially by our Data Protection team.