tt7000 Privacy Policy

tt7000 collects personal data from you in several ways: directly when you register an account or contact our support team, automatically when you use the Platform, and from third-party payment providers in connection with deposit and withdrawal transactions. The categories of personal data we collect are described below.

Account Registration Data

When you create a tt7000 account, we collect the information you provide in the registration form. This includes your full name, date of birth, mobile phone number, and the login credentials (username and password) you choose. This data is necessary to establish your account, verify your age and identity, and provide you with access to the Platform.

Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, which is required before the processing of any withdrawal, we collect copies of identity documents you submit. Acceptable documents include a valid national identity card, passport, or driving licence. We may also request proof of address and documentation confirming ownership of your registered payment method. KYC documents are stored securely and are used solely for identity verification purposes.

Financial Transaction Data

tt7000 records all deposits and withdrawals processed through your account, including the payment method used (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), transaction amounts, dates and times, and transaction reference numbers. We do not store full card numbers or mobile banking PINs — these are processed by the relevant payment provider directly. We receive only a tokenised reference sufficient to link the transaction to your account.

Usage and Behavioural Data

When you use the Platform, we automatically collect technical and behavioural data. This includes your IP address, device type and operating system, browser type and version, pages visited, games played, bets placed, session duration, and clickstream data. This information is used to improve the Platform, personalise your experience, detect fraud, and fulfil our responsible gaming obligations.

Communications Data

When you contact tt7000's support team via live chat or WhatsApp, we retain records of those conversations. This data is used to resolve your query, improve our support quality, and maintain an audit trail of account-related interactions. Support communications are retained for a period of 24 months from the date of the interaction.

tt7000 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share your data with third parties only where it is necessary to deliver our services, comply with a legal obligation, or protect the integrity of the Platform. All third-party data processors who receive your data are bound by contractual obligations to process it only for the specified purpose and to maintain appropriate security standards.

Payment Service Providers

To process your deposits and withdrawals, tt7000 shares the minimum necessary financial data with the relevant payment service provider — including bKash, Nagad, Rocket, Upay, and the card-processing networks for Visa and Mastercard. Each of these providers operates under its own privacy policy, which governs how they handle the data they receive in connection with your transaction.

Game Content Providers

tt7000 integrates game content from third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game from one of these providers, technical session data (such as a session token, account identifier, and stake amount) is transmitted to the provider's servers to enable gameplay. Game providers do not receive your full name, contact details, or payment information.

Fraud Prevention and Security Services

tt7000 may share limited technical data (such as IP addresses and device fingerprints) with specialist fraud detection services to assess the risk level of account activity. This processing is based on our legitimate interest in maintaining a secure and fair gaming environment.

Legal and Regulatory Disclosure

tt7000 may disclose your personal data to law enforcement agencies, government bodies, or other authorised parties where we are required to do so by applicable law, court order, or in response to a lawful request. We will, where legally permissible, notify you of any such disclosure.

tt7000 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures are reviewed and updated regularly to reflect best practices in information security.

Technical Safeguards

• 256-bit SSL/TLS encryption is applied to all data transmitted between your device and the tt7000 servers. This ensures that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Password hashing: User passwords are never stored in plain text. They are hashed using a strong one-way cryptographic algorithm before storage, meaning that even in the highly unlikely event of a data breach, your actual password cannot be derived from the stored value.
• Access controls: Access to systems that hold personal data is restricted to tt7000 staff who have a legitimate operational need. All staff access is role-based, logged, and audited.
• Intrusion detection: tt7000's infrastructure is monitored continuously for signs of unauthorised access, unusual traffic patterns, and known attack signatures.
• Data segregation: Payment tokenisation data, KYC documents, and account credentials are stored in separate, independently secured environments to limit the scope of any potential breach.

Organisational Safeguards

• All staff who handle personal data undergo privacy and data security training as part of their onboarding and annually thereafter.
• Third-party vendors who process personal data on tt7000's behalf are evaluated for their security posture before engagement and are contractually bound to maintain equivalent security standards.
• tt7000 maintains an incident response plan. In the event of a data breach that poses a risk to user privacy, affected users will be notified without undue delay.

As a user of the tt7000 platform, you have a number of rights in relation to the personal data we hold about you. tt7000 is committed to honouring these rights and will respond to all valid requests within 30 days of receipt. To exercise any of the rights described below, please contact our support team via live chat or in writing at [email protected] with the subject line "Privacy Rights Request".

Right of Access

You have the right to request a copy of the personal data that tt7000 holds about you. This is sometimes referred to as a Subject Access Request (SAR). We will provide the data in a clear, readable format within 30 days. There is no charge for a standard access request.

Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update many of your account details directly through your account settings page. For changes to name, date of birth, or identity document records, please contact our support team.

Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis applies. Where a legal or regulatory retention obligation prevents immediate deletion, we will inform you and delete the data as soon as the obligation expires.

Right to Restrict Processing

In certain circumstances (for example, while the accuracy of data you have disputed is being verified), you have the right to request that tt7000 restricts the processing of your personal data. During a restriction, we will continue to store your data but will not actively process it for other purposes.

Right to Object

You have the right to object to the processing of your personal data where that processing is based on tt7000's legitimate interest. This includes the right to withdraw consent to marketing communications at any time. Where you object to processing that is not based on your consent, tt7000 will assess whether a compelling legitimate ground exists that overrides your interests.

Right to Data Portability

Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format. You may also request that we transmit this data directly to another service provider where technically feasible.