moja7 Privacy Policy —
Your Data, Protected

1. Who We Are

moja7 is an online betting and casino platform operating at moja7.ws, providing sports betting, live casino games, slot games, and instant lottery products to players in Bangladesh. When we refer to "moja7", "we", "us", or "our" throughout this Privacy Policy, we mean the moja7 platform and its operating entity responsible for processing your personal data.

If you have any questions about this Privacy Policy or how we handle your personal information, you may contact our Data Support team at [email protected]. Our support team is available 24 hours a day, 7 days a week, including Bangladesh public holidays.

2. Information We Collect

moja7 collects personal information in a number of ways — directly from you when you register or interact with the platform, automatically as you use our services, and in limited circumstances from trusted third-party sources. The categories of information we collect are described below.

2.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, gender, nationality, residential address (including city — e.g., Dhaka, Chittagong, Sylhet, Khulna), email address, and phone number.
• Identity verification documents: Copies of government-issued photo ID (national ID card, passport, or driving licence) submitted during KYC verification.
• Payment information: Mobile wallet numbers (bKash, Nagad, Rocket, Upay) and card details (Visa, Mastercard) used to make deposits. Full card numbers are not stored on moja7 servers after a transaction is processed.
• Communications: Messages, emails, live chat transcripts, or complaint submissions you send to our support team.
• Responsible gaming preferences: Any deposit limits, loss limits, cooling-off periods, or self-exclusion requests you submit through your account settings.

2.2 Information Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device type, screen resolution, and unique device identifiers.
• Usage data: Pages visited, games played, betting history, session duration, click-stream data, and feature interaction logs.
• Geolocation data: Approximate location derived from your IP address, used to verify eligibility and comply with regional access requirements.
• Cookie data: Information stored via cookies, web beacons, and similar tracking technologies as described in Section 6 of this Policy.

2.3 Information from Third Parties

• Payment processors: Transaction status, reference numbers, and fraud-screening signals received from payment gateway partners such as bKash, Nagad, and card processing networks.
• Identity verification services: Confirmation of document authenticity and age-verification outcomes from third-party KYC providers.
• Fraud prevention partners: Risk scores and alert signals from fraud detection services used to protect the platform and its players.

3. How We Use Your Information

moja7 uses the personal information collected for the following specific purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected without first informing you and, where required, obtaining your consent.

4. Legal Basis for Processing

moja7 processes your personal data on the following legal grounds:

• Contract performance: Processing necessary to provide the services you have contracted for, including account management, payment processing, and delivering game results.
• Legal obligation: Processing required to comply with applicable laws, including anti-money-laundering (AML) regulations, age-verification requirements, and financial record-keeping obligations.
• Legitimate interests: Processing carried out for purposes including fraud prevention, platform security, responsible gaming monitoring, and improving our services, where these interests are not overridden by your rights and freedoms.
• Consent: Where we rely on your consent — for example, to send you promotional communications — you may withdraw that consent at any time by updating your account preferences or contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Sharing Your Information

moja7 does not sell your personal data. We share your information only in the limited circumstances described below, and only to the extent necessary for the specified purpose.

• Payment service providers: We share necessary payment details with bKash, Nagad, Rocket, Upay, and card-processing networks solely to facilitate deposits and withdrawals. These providers process your data under their own privacy policies and security standards.
• KYC and identity verification partners: We share identity documents with trusted third-party verification services to confirm your age and identity as required by our age-gating obligations. These providers are contractually bound to process your data only for this purpose.
• Game providers: Game software providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical identifiers (such as an anonymised player ID) to deliver game content and calculate results. They do not receive your name, address, or financial details.
• Fraud prevention and security services: We may share device fingerprints, IP addresses, and transaction patterns with specialised fraud-detection partners to identify and prevent financial crime, bonus abuse, and unauthorised access.
• Legal and regulatory authorities: We may disclose your information to law enforcement agencies, regulators, or courts where required to do so by applicable law, court order, or legal process. moja7 will notify affected players of such disclosures wherever legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of the platform, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any material change to data practices that may result from it.

All third parties with whom moja7 shares data are required to maintain appropriate technical and organisational security measures and are prohibited from using your data for any purpose beyond those specified in their contractual arrangements with moja7.

6. Cookies and Tracking Technologies

moja7 uses cookies and similar technologies (including web beacons, pixel tags, and local storage) to operate the platform effectively, remember your preferences, and gain insight into how the platform is used. The categories of cookies we deploy are as follows:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, security tokens, and load-balancing cookies. These cookies cannot be disabled without rendering the platform unusable.
• Functional cookies: Remember your preferences such as language settings, game history, and last-visited sections to provide a more personalised experience.
• Analytics cookies: Collect anonymised data about how players interact with the platform — pages visited, time spent, errors encountered — to help us identify areas for improvement. This data is aggregated and does not identify individuals.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and suspicious login attempts.

You may manage cookie preferences through your browser settings. Please note that disabling cookies classified as strictly necessary may impair your ability to log in or use core platform features. moja7 does not deploy third-party advertising or retargeting cookies.

7. Data Security

moja7 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption on all data in transit between your device and moja7 servers.
• Encrypted storage for all sensitive personal data fields, including identity documents and payment references, using industry-standard encryption algorithms.
• Access controls: Personal data is accessible only to moja7 staff and systems that have a documented, legitimate need. Access is governed by role-based permissions and is subject to audit logging.
• Two-factor authentication (2FA): Available to all players for account login, and mandatory for all internal administrative access to systems that process personal data.
• Regular security audits: Our platform undergoes periodic penetration testing and vulnerability assessments conducted by independent security specialists.
• Incident response: In the event of a confirmed personal data breach that poses a risk to your rights and freedoms, moja7 will notify affected players promptly and take immediate remediation action.

While moja7 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your own account credentials confidential and for notifying us immediately if you suspect unauthorised access to your account.

8. Data Retention

moja7 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by law. The following general retention periods apply:

• Account and registration data: Retained for the duration of your active account plus a period of five years following account closure, in compliance with financial record-keeping and anti-money-laundering requirements.
• Transaction and payment records: Retained for a minimum of seven years in accordance with applicable financial regulations.
• KYC and identity verification documents: Retained for the duration of the account relationship and for five years thereafter, unless a longer period is required by law.
• Customer support communications: Retained for three years from the date of the last interaction to enable ongoing dispute resolution and quality assurance.
• Usage and analytics data: Aggregated and anonymised analytics data may be retained indefinitely as it cannot be used to identify individual players.
• Marketing preferences and consent records: Retained for the duration of the marketing relationship plus two years to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked back to any individual player.

9. Your Rights and Choices

As a player on the moja7 platform, you hold a number of rights with respect to your personal data. moja7 is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights listed below, please contact our support team at [email protected].

moja7 aims to respond to all data rights requests within 30 calendar days of receipt. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. There is no charge for exercising your rights in ordinary circumstances.

10. Children and Minors

moja7 strictly prohibits the use of its platform by persons under the age of 21 years. We do not knowingly collect personal data from anyone under this age. If we become aware that personal data has been collected from a person who is under 21, we will immediately close the associated account, delete all personal data collected, and return any deposited funds to the source of payment.

Parents and guardians are encouraged to make use of parental control software and internet filtering tools to prevent underage individuals from accessing online gambling platforms including moja7.ws. If you believe a minor has registered an account on our platform, please contact our support team at [email protected] immediately so that we can take prompt action.

11. Third-Party Services

The moja7 platform integrates with third-party services including game software providers, payment processors, and analytics tools to deliver a complete gaming experience. While moja7 carefully selects its partners and requires them to maintain appropriate data protection standards, we are not responsible for the privacy practices of third-party services operating under their own independent privacy policies.

Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate their game engines on their own infrastructure. When you play a game provided by these studios, limited technical data (such as anonymised session tokens and bet outcomes) is exchanged with the provider's systems as a technical necessity. This data transfer is governed by contractual data processing agreements between moja7 and each provider.

Payment partners including bKash, Nagad, Rocket, and Upay process payment transactions through their own secure systems. Please refer to the relevant payment provider's privacy policy for details of how they handle your financial data during a transaction.

12. Changes to This Policy

moja7 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes to this Policy, we will update the "Last updated" date at the top of this page and, where appropriate, notify active players by email or through an in-platform notification.

We encourage you to review this Privacy Policy periodically to stay informed about how moja7 is protecting your personal information. Your continued use of the platform following publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way moja7 handles your personal data, please contact our dedicated support team using the details below. All privacy-related enquiries are handled in English and will receive a substantive response within five business days.

• Email: [email protected]
• Website: moja7.ws
• Support Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)

When contacting us regarding a data rights request, please include your registered username and a clear description of your request so that we can process it as efficiently as possible. We may need to verify your identity before fulfilling certain types of request in order to protect the security of your account.