88f8 Privacy Policy

This Privacy Policy applies to all services offered by 88f8 through the website https://88f8.io and any related mobile or desktop interfaces. It describes how 88f8 collects, uses, discloses, and safeguards the personal information of players and visitors based in Bangladesh and elsewhere.

88f8 is committed to protecting the privacy and security of every individual who interacts with our platform. We process personal data only where we have a lawful basis to do so, and we implement technical and organisational measures proportionate to the sensitivity of the data involved.

This policy should be read alongside the 88f8 Terms & Conditions, which govern the overall relationship between you and the platform. Where this Privacy Policy and the Terms & Conditions conflict on a data protection matter, this Privacy Policy takes precedence.

If you have questions about any aspect of this policy, or wish to exercise any of your data rights, please contact us at [email protected]. We will acknowledge all privacy-related enquiries within two business days and provide a substantive response within 14 calendar days.

For the purposes of this Privacy Policy, 88f8 acts as the data controller in respect of all personal data collected through the 88f8 platform. As data controller, 88f8 determines the purposes for which your personal data is processed and the means by which that processing takes place.

Where 88f8 engages third-party service providers to process personal data on its behalf — for example, payment processors or identity verification services — those parties act as data processors under instruction from 88f8. 88f8 remains responsible for ensuring that all such processors handle your data in accordance with the standards set out in this policy.

All privacy-related enquiries, data subject access requests, and deletion requests should be directed in writing to: [email protected] (plain text — this address is not a clickable link).

88f8 collects personal data in three principal ways: information you provide directly, information generated automatically through your use of the platform, and information obtained from trusted third-party sources as part of our identity verification and fraud prevention processes.

Information you provide directly:

• Full legal name, date of birth, and nationality.
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postcode.
• Email address and mobile phone number.
• Username and encrypted password hash.
• Government-issued identity document details (National ID number, passport number, or driving licence number) submitted during Know Your Customer (KYC) verification.
• Payment method details, including bKash wallet number, Nagad number, Rocket number, Upay number, or bank account details as applicable.
• Correspondence submitted to our customer support team via email or live chat.

Information collected automatically:

• IP address and approximate geolocation data derived from it.
• Device type, operating system, and browser version.
• Session timestamps, pages visited, and time spent on each section of the platform.
• Game activity logs, including game titles played, wager amounts, bet outcomes, and session durations.
• Cookie identifiers and similar tracking technologies (see Section 6 for full details).

Information from third parties:

• Identity verification results from KYC and anti-money-laundering (AML) screening services.
• Fraud risk scores and flagging data from fraud prevention partners.
• Payment transaction confirmation and status data from bKash, Nagad, Rocket, Upay, and banking partners.

The following table summarises the primary categories of personal data processed by 88f8:

88f8 processes your personal data only where it has a clear and lawful basis to do so. The primary purposes for which we process personal data, and the corresponding legal basis for each, are set out below:

• Account creation and management: To establish and maintain your 88f8 account, verify your identity, and provide you with access to platform services. Legal basis: performance of a contract.
• Payment processing: To receive deposits and dispatch withdrawals via bKash, Nagad, Rocket, Upay, and banking partners in Bangladeshi Taka. Legal basis: performance of a contract.
• Identity and age verification: To confirm that you are at least 21 years of age and to complete KYC checks as required by our operational policies. Legal basis: legal obligation and legitimate interests.
• Fraud detection and prevention: To identify and prevent money laundering, account takeover attempts, bonus abuse, and other forms of fraudulent activity. Legal basis: legitimate interests and legal obligation.
• Customer support: To respond to your queries, resolve disputes, and maintain records of support interactions. Legal basis: performance of a contract.
• Responsible gaming: To monitor gameplay patterns and intervene where our systems indicate a player may be at risk of gambling-related harm. Legal basis: legitimate interests and legal obligation.
• Platform improvement: To analyse aggregated usage data and improve the functionality, security, and content of the 88f8 platform. Legal basis: legitimate interests. (Aggregated analytics data does not identify individual players.)
• Marketing communications: To send you promotional offers, bonus notifications, and seasonal promotions (e.g., BPL season specials, Eid offers) where you have opted in to receive such communications. Legal basis: consent. You may withdraw consent at any time by contacting [email protected].

88f8 does not sell, rent, or trade your personal data to any third party. We share personal data with external parties only in the following circumstances, and only to the extent strictly necessary:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive transaction data necessary to process deposits and withdrawals on your behalf.
• Identity verification providers: Our KYC and AML partners receive the identity and document data necessary to complete regulatory screening checks.
• Fraud prevention services: Risk-scoring and fraud-detection partners receive technical identifiers (IP address, device fingerprint) and account activity data to assess and mitigate fraud risk.
• Game content providers: Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier to facilitate game launches. They do not receive your full identity or financial data.
• Legal and regulatory authorities: Where required by applicable law or where 88f8 is under a duty to disclose or share information in order to comply with any legal obligation, we may share data with law enforcement agencies, regulatory bodies, or courts.

All third-party data processors engaged by 88f8 are contractually required to implement appropriate security measures and to use personal data only for the specific purposes authorised by 88f8.

88f8 uses cookies and similar tracking technologies to operate the platform, maintain your logged-in session, remember your preferences, and analyse how players navigate the site. The following categories of cookies are in use:

• Strictly necessary cookies: These are essential to the operation of the 88f8 platform. They enable core functionality such as session management, security token validation, and load balancing. These cookies cannot be disabled without impairing your ability to use the platform.
• Functional cookies: These remember your preferences — such as your preferred language and display settings — so that you do not need to re-enter them on each visit.
• Analytics cookies: These collect aggregated, anonymised data about how visitors use the 88f8 platform. The data helps us understand which pages and features are most useful and where improvements can be made. No individually identifiable data is shared with analytics providers.
• Security cookies: These help detect and prevent fraudulent login attempts, account takeover attacks, and automated bot activity.

88f8 does not use third-party advertising or behavioural targeting cookies. No cross-site tracking is performed for the purpose of serving you advertisements on other websites.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent the 88f8 platform from functioning correctly. Disabling functional or analytics cookies will not affect your ability to play games or process transactions.

88f8 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account and identity data: Retained for a minimum of five (5) years following account closure, to satisfy financial record-keeping and anti-money-laundering obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in line with financial audit requirements.
• Customer support communications: Retained for three (3) years from the date of the most recent communication in a given support thread.
• Session and gameplay logs: Retained for twenty-four (24) months from the date of each session, after which they are permanently deleted from active systems.
• Marketing consent records: Retained for the duration of your active consent, plus twelve (12) months following withdrawal of consent, to provide an audit trail.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual. Where data is anonymised, it may be retained indefinitely for statistical and analytics purposes.

88f8 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Key measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the 88f8 platform is encrypted using industry-standard 256-bit SSL/TLS encryption.
• Password hashing: Account passwords are never stored in plain text. They are stored as salted cryptographic hashes using a modern hashing algorithm.
• Access controls: Access to personal data within 88f8's internal systems is strictly limited to authorised personnel who require it to perform their job functions. All internal access is logged and audited.
• Intrusion detection: 88f8's infrastructure is monitored continuously for suspicious activity, including brute-force login attempts and unusual transaction patterns.
• Data minimisation in integrations: Third-party service providers receive only the minimum data required to perform their function. Full personal profiles are not shared with any external party unless legally required.

No security system is completely infallible. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 88f8 will notify affected players without undue delay and take all reasonable steps to contain and remediate the breach.

You have a number of rights in relation to the personal data that 88f8 holds about you. These rights are described below. To exercise any of these rights, please submit a written request to [email protected]. We will respond within 14 calendar days.

• Right of access: You may request a copy of all personal data that 88f8 holds about you, including the categories of data, the purposes for which it is processed, and the parties with whom it has been shared.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Some corrections may require supporting documentation.
• Right to erasure: In certain circumstances, you may request that 88f8 delete your personal data. This right is not absolute — we may be required to retain certain data to comply with legal obligations, and data erasure requests will be assessed against those obligations on a case-by-case basis.
• Right to restrict processing: You may request that 88f8 restrict the processing of your data in specific circumstances — for example, where you contest the accuracy of the data while we verify your correction request.
• Right to data portability: Where technically feasible, you may request that 88f8 provide your personal data in a structured, commonly used, and machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to object: You may object to processing carried out on the basis of legitimate interests where you have grounds relating to your particular situation.

Please note that exercising certain rights — such as requesting erasure of your identity data — may prevent 88f8 from continuing to provide services to you, as that data is required to maintain a compliant account.

The 88f8 platform is strictly intended for adults aged 21 years and above. 88f8 does not knowingly collect personal data from individuals under the age of 21. All account registrations are subject to age verification, and accounts where the holder is found to be under 21 will be immediately closed.

If you have reason to believe that a minor has registered on the 88f8 platform or has submitted personal data to us, please notify us immediately at [email protected]. We will investigate and take prompt action, including deleting the relevant personal data and closing the account.

Parents and guardians are encouraged to make use of parental control software and to discuss responsible online behaviour with minors in their care. 88f8 supports the work of organisations dedicated to the protection of minors from gambling-related harm.

Some of the third-party service providers used by 88f8 — including game content providers such as Pragmatic Play, Evolution Gaming, NetEnt, and Microgaming — operate data centres located outside Bangladesh. Where personal data is transferred to a processor located outside the country, 88f8 ensures that appropriate contractual safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

These safeguards include data processing agreements that impose binding obligations on the recipient regarding data security, use limitation, and the rights of data subjects. Where a recipient is located in a jurisdiction without an equivalent level of data protection, additional contractual clauses are implemented to bridge that gap.

The anonymised session tokens passed to game providers do not constitute a transfer of personally identifiable information. Your full name, contact details, financial information, and identity documents are not transmitted to game content providers.

88f8 reserves the right to update or revise this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data processing or a new category of third-party recipient — we will provide advance notice to registered players via the email address held on their account, no less than seven (7) days before the changes take effect.

Minor clarifications or corrections that do not materially affect the substance of this policy may be made without advance notice. The "Last updated" date at the top of this document will reflect the date of the most recent revision.

Your continued use of the 88f8 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a revised policy, you must cease using the platform and request account closure before the effective date.

We recommend reviewing this Privacy Policy periodically to remain informed about how 88f8 handles your personal data.

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or would like to raise a concern about how 88f8 handles your personal data, please contact our support team using the details below. All privacy enquiries are handled by agents based in Bangladesh Standard Time (UTC+6).

• Email: [email protected] (plain text — not a clickable link)
• Response target: Acknowledgement within 2 business days; substantive response within 14 calendar days.
• Live Chat: Available 24 hours a day, 7 days a week, from within the 88f8 platform after logging in.

For concerns related to responsible gaming, deposit limits, self-exclusion, or gambling-related harm, please visit our Responsible Gaming page, which provides dedicated guidance and self-assessment tools.