Your Privacy Matters
to f888

Who We Are

f888 operates the online betting and casino platform accessible at https://f888.vu (the "Platform"). For the purposes of this Privacy Policy, f888 acts as the data controller in respect of the personal data collected from players who register and use the Platform.

This Privacy Policy applies to all individuals who access, browse, register on, or otherwise interact with the f888 Platform, including individuals who contact f888 support without holding a registered account. By using the Platform, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and processing of your personal data as described herein.

f888 serves players located in Bangladesh and operates under Bangladesh Standard Time (BST, UTC+6). All communications relating to data privacy matters, including subject access requests and deletion requests, are handled in English and responded to within the timeframes described in Section 10 of this Policy.

Data We Collect

f888 collects several categories of personal data from players. The specific data collected depends on how you interact with the Platform. The categories below describe the full range of personal data that f888 may hold about you:

f888 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, except where such information is voluntarily disclosed by a player in the context of a responsible gaming support request, in which case it is treated with the highest level of confidentiality.

How We Collect Your Data

f888 collects your personal data through the following primary channels:

• Direct interactions: Data you provide when you complete the registration form, submit KYC documents, make a deposit or withdrawal request, contact support via live chat or email, or update your account profile.
• Automated collection: Technical and usage data collected automatically by f888's servers each time you visit the Platform, through server logs, session tracking, and first-party cookies or similar technologies (see Section 7 for details on cookies).
• Payment processors: Transaction confirmation data received from bKash, Nagad, Rocket, and Upay when you complete a deposit or withdrawal, including transaction reference numbers, timestamps, and the wallet number used.
• KYC verification providers: Identity verification results, document validation outcomes, and age confirmation data received from the third-party KYC providers that f888 uses to fulfil its obligations to prevent underage gambling and financial crime.
• Game studio providers: Game session data, round results, and bet history received from third-party game studio platforms (such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, and Microgaming) as part of the normal operation of games hosted on f888.
• Fraud prevention services: Risk scores, device fingerprints, and behavioural flags provided by fraud prevention partners to help f888 identify and prevent suspicious activity on the Platform.

Legal Basis for Processing

f888 processes your personal data only where a valid legal basis exists. The legal bases upon which f888 relies for each category of processing activity are as follows:

• Performance of a contract: Processing your identity data, contact data, and financial data is necessary for f888 to deliver the services you have requested, including managing your account, processing deposits and withdrawals, and resolving disputes. Without this processing, f888 cannot provide the service.
• Legal obligation: f888 is required by applicable law to collect and retain certain data, including identity verification records (KYC), transaction records, and communications related to potential financial crime. This data is retained for the periods specified in Section 8 regardless of your preferences.
• Legitimate interests: f888 processes technical data, usage data, and fraud-related data on the basis of its legitimate interests in operating a secure, fair, and commercially viable platform. These interests include: preventing fraud and account takeover; monitoring for prohibited conduct; analysing Platform performance; and understanding how players use the service in order to improve it.
• Consent: Where f888 seeks to send you promotional communications by email or on-platform notification (beyond transactional messages), this is done on the basis of your consent, which you may withdraw at any time via your account settings or by contacting support.

How We Use Your Data

f888 uses the personal data it collects for specific, lawful purposes. The primary uses are described below:

• Account creation and management: To create and maintain your f888 player account, verify your identity and age (21+ requirement), manage your account preferences, and process your login credentials securely.
• Transaction processing: To process deposits and withdrawals in Bangladeshi Taka (BDT) via bKash, Nagad, Rocket, and Upay, and to maintain a complete and accurate record of all financial transactions associated with your account.
• Customer support: To investigate and resolve account queries, complaints, bonus disputes, and technical issues raised through f888's live chat and email support channels.
• Fraud prevention and security: To detect and prevent unauthorised account access, bonus abuse, money laundering, match-fixing, and other forms of fraud or prohibited conduct described in the f888 Terms and Conditions.
• Responsible gaming compliance: To monitor player behaviour for signs of problematic gambling, to enforce deposit limits and self-exclusion arrangements, and to comply with responsible gaming obligations.
• Platform improvement: To analyse usage patterns, identify technical issues, and make informed decisions about new features, game additions, and service improvements based on aggregated and anonymised usage data.
• Legal and regulatory compliance: To fulfil record-keeping obligations, respond to lawful requests from regulatory or law enforcement authorities, and defend f888's legal interests in the event of a dispute.
• Promotional communications: Where you have consented, to send you information about promotions, bonuses, tournaments, and seasonal offers relevant to your interests as an f888 player. You may opt out at any time.

f888 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you, except in the context of fraud prevention screening, where automated systems may flag an account for manual review by f888's compliance team.

Sharing Your Data

f888 does not sell or rent your personal data to any third party. Data is shared with external parties only in the following circumstances, and only to the minimum extent necessary for the relevant purpose:

• KYC and identity verification providers: f888 shares identity data (name, date of birth, document images) with specialist third-party KYC providers to verify player identity and age. These providers are contractually bound to process this data solely for verification purposes and to maintain appropriate security standards.
• Payment processors: Transaction data is shared with bKash, Nagad, Rocket, and Upay as necessary to process deposits and withdrawals. Each of these providers operates under its own privacy policy and is responsible for the data it processes in connection with your mobile wallet account.
• Game studio providers: Where you play games hosted by third-party studios (including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, and Microgaming), your account identifier, bet amounts, and game session data are shared with the relevant studio as part of the technical integration. These studios are authorised to use this data solely for game delivery and integrity monitoring purposes.
• Fraud prevention and security partners: Technical and behavioural data may be shared with fraud prevention services that help f888 identify suspicious activity, device-based threats, and multi-account behaviour.
• Law enforcement and regulatory authorities: f888 will disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by applicable law, court order, or lawful governmental request. f888 will, where legally permitted, notify you of such disclosure.
• Professional advisors: Legal counsel, auditors, and other professional advisors engaged by f888 may access personal data on a need-to-know basis in connection with the advice or services they provide, subject to confidentiality obligations.

Cookies and Tracking Technologies

f888 uses cookies and similar first-party tracking technologies to operate the Platform, maintain your login session, remember your preferences, and collect usage data for security and performance monitoring purposes. A breakdown of the cookie categories used is provided below:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They maintain your login session, store your language and currency preferences, and protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without disrupting your use of the Platform.
• Performance and analytics cookies: These cookies collect anonymised information about how players use the Platform — for example, which pages are visited most frequently, how long sessions last, and where technical errors occur. This data is used to improve Platform performance and user experience.
• Security cookies: These cookies support f888's fraud detection and account security systems by storing a device fingerprint reference and flagging anomalous login behaviour for review.

f888 does not use third-party advertising cookies or allow external ad networks to place tracking technologies on the Platform. The cookies used by f888 are limited to those necessary for service delivery, security, and internal analytics.

Most web browsers allow you to control cookies through their settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your f888 account and using core Platform features. Disabling performance cookies will not affect your ability to bet or play games but will limit f888's ability to improve the Platform over time.

Data Retention

f888 retains personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required or permitted by applicable law. The general retention periods applied by f888 are as follows:

• Account and identity data: Retained for a minimum of five years from the date of account closure, to satisfy anti-money laundering record-keeping requirements and to enable investigation of historical disputes or regulatory enquiries.
• Financial transaction data: Retained for a minimum of five years from the date of each transaction, in accordance with financial record-keeping obligations applicable to online gaming and payment service operations.
• KYC verification records: Retained for a minimum of five years from the date of verification, or longer if required by a specific legal or regulatory obligation applicable at the time of retention.
• Customer support communications: Retained for three years from the date of the last interaction in a support thread, to enable resolution of recurring disputes and to support quality assurance monitoring.
• Technical and usage data: Retained for up to 24 months from collection, after which it is either deleted or fully anonymised such that it can no longer be associated with any individual player.
• Responsible gaming records: Self-exclusion records and limit-setting history are retained for the duration of the self-exclusion period plus five years, to prevent circumvention of exclusion arrangements.
• Marketing consent records: Retained for the duration of your active account and for two years following account closure, to demonstrate the lawful basis for any promotional communications sent to you during that period.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with f888's internal data deletion procedures. Players may request early deletion of specific data categories where deletion does not conflict with f888's legal retention obligations, as described in Section 10.

Security Measures

f888 implements a range of technical and organisational security measures designed to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. Key measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your browser or mobile device and the f888 Platform is encrypted using Transport Layer Security (TLS) with a 256-bit key. This applies to every page of the Platform, including the login page, cashier, and account management areas.
• Encryption at rest: Sensitive data stored in f888's databases — including financial data, identity documents, and password hashes — is encrypted at rest using AES-256 encryption or equivalent standards.
• Access controls: Access to player data is restricted on a strict need-to-know basis. Internal staff access is governed by role-based access control policies, and all access to sensitive systems is logged and reviewed.
• Two-factor authentication: f888 supports two-factor authentication (2FA) for player accounts and requires it for all internal administrative access to systems holding personal data.
• Vulnerability management: f888 conducts regular security assessments of the Platform, including penetration testing and vulnerability scanning, to identify and remediate security weaknesses before they can be exploited.
• Data breach response: f888 maintains an internal data breach response procedure. In the event of a confirmed breach that poses a risk to player rights and freedoms, affected players will be notified without undue delay, together with guidance on any protective action they should take.

Your Rights Over Your Data

As an f888 player, you hold the following rights in respect of the personal data that f888 processes about you. To exercise any of these rights, please contact f888 support via live chat or email as described in Section 15.

• Right of access (Subject Access Request): You have the right to request a copy of all personal data that f888 holds about you. f888 will respond to a valid Subject Access Request within 30 calendar days of receipt.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data that f888 holds about you. If you identify an error in your account profile, you may correct it directly in the account settings section or by contacting support.
• Right to erasure (Right to be forgotten): You may request deletion of your personal data where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and no other legal basis applies; or (c) the data has been processed unlawfully. Note that f888 cannot delete data that it is required to retain by law (see Section 8).
• Right to restriction of processing: You may request that f888 restrict processing of your personal data in certain circumstances, for example while a dispute about its accuracy is under investigation, or while an objection to processing is being considered.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests at any time, on grounds relating to your particular situation. f888 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, or unless processing is necessary for legal claims.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

f888 will respond to all data rights requests within 30 calendar days. For complex or high-volume requests, f888 may extend this period by a further 60 days with notice provided to you within the initial 30-day window. f888 does not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive.

Children's Privacy and Underage Access

f888 is strictly an adult platform. The minimum age to register and use f888 is 21 years. f888 does not knowingly collect personal data from individuals under the age of 21. The Platform is not directed at, and is not designed or intended for use by, minors.

As part of the registration and KYC verification process, f888 takes active steps to verify that all players meet the minimum age requirement. Any account found to belong to a person under the age of 21 will be immediately and permanently closed. Any personal data collected from such an account will be deleted (subject to any legal obligation to retain records of the underage access event for compliance purposes) and any funds held in the account will be returned to the payment method from which they originated.

If you are a parent or guardian and believe that a person under the age of 21 has registered an account on f888 using false information, please contact f888 support immediately via live chat or by email. f888 will investigate and take prompt action to close the account and delete the relevant data.

Marketing Communications

f888 may send you promotional communications about bonuses, seasonal offers, new game releases, tournaments, and other Platform news where you have provided your consent to receive such communications during the registration process or subsequently via your account notification settings.

Marketing communications from f888 are delivered through the following channels, subject to your consent preferences:

• On-platform notifications: Messages displayed within your f888 account dashboard or during active Platform sessions, notifying you of active promotions, bonus credit events, and tournament schedules.
• Email communications: Promotional emails sent to your registered email address, including welcome offers, deposit bonus reminders, seasonal promotions tied to events such as Eid, Pohela Boishakh, or major cricket tournaments such as the BPL and IPL, and re-engagement messages for accounts that have been inactive for a defined period.

You may withdraw your consent to receive marketing communications at any time by:

• Visiting the notification preferences section of your f888 account settings and deselecting promotional communications; or
• Clicking the unsubscribe link included in the footer of any marketing email sent by f888; or
• Contacting f888 support via live chat or email and requesting removal from all promotional communications.

Withdrawal of consent for marketing communications does not affect transactional messages, which f888 must send regardless of your marketing preferences. Transactional messages include deposit and withdrawal confirmations, account security alerts (e.g., new login detected), KYC status updates, responsible gaming notifications, and any communication required to deliver the service or fulfil a legal obligation.

Third-Party Services and External Links

The f888 Platform integrates with a number of third-party service providers whose technologies are necessary to deliver the full range of betting and casino products available on the Platform. While f888 carefully selects its third-party partners and requires them to maintain appropriate data protection standards, each third party operates under its own privacy policy and is independently responsible for the personal data it processes.

The categories of third-party services integrated with the f888 Platform include:

• Game studios and content providers: Including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive game session data, including your account reference and bet history within their respective game environments, for the purpose of game delivery, round verification, and jackpot calculation.
• Payment processors: Including bKash, Nagad, Rocket, and Upay. These providers receive your wallet number, transaction amount in BDT, and a transaction reference generated by f888 in order to execute deposit and withdrawal instructions. They do not receive your full name, government ID, or other identity data from f888.
• KYC and age verification providers: Specialist services that receive copies of your government-issued identity documents, a selfie or liveness check image, and basic personal details (name, date of birth) for the purpose of confirming your identity and confirming you meet the 21+ age requirement.
• Fraud prevention and risk management providers: Services that receive technical data (IP address, device fingerprint, session behaviour) to provide real-time risk scoring and fraud alerts to f888's security team.

f888 enters into written data processing agreements with all third-party providers that process personal data on behalf of the Platform. These agreements require providers to: process data only on f888's documented instructions; implement appropriate technical and organisational security measures; not sub-process data without f888's prior written authorisation; and assist f888 in fulfilling its obligations to respond to data subject rights requests.

The f888 Platform does not contain hyperlinks to external third-party websites. All content and navigation on f888 remains within the f888.vu domain. Accordingly, f888 is not responsible for the privacy practices of any external site that a player may independently navigate to outside of the f888 Platform.

Changes to This Privacy Policy

f888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, changes in the services offered on the Platform, changes in the third-party providers used, or improvements in f888's internal data governance practices.

When a material change is made to this Privacy Policy — meaning a change that affects how your personal data is collected, used, shared, or retained in a way that is meaningfully different from the previous version — f888 will notify registered players through one or more of the following methods:

• A prominent notice displayed on the f888 Platform homepage and account dashboard for a period of not less than 14 days before the revised Policy takes effect;
• An on-platform notification sent to your account inbox informing you of the nature of the change and directing you to the updated Policy; and/or
• An email to your registered email address summarising the key changes and the new effective date.

Non-material changes — such as corrections of typographical errors, clarifications of existing policy language that do not alter the substance of how data is processed, or updates to contact information — may be made without prior notice, though the effective date shown at the top of this page will always be updated to reflect the date of the most recent revision.

Your continued use of the f888 Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Privacy Policy, you must stop using the Platform and, if you wish, request closure of your account by contacting f888 support. Continued use of your account after the effective date of any revision will be deemed acceptance of the amended Policy.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which f888 processes your personal data, please contact the f888 support team through any of the channels below. All privacy-related enquiries are handled by f888's data protection function and will be responded to in English.

• Live Chat: Available 24 hours a day, seven days a week, directly within the f888 Platform. Live chat support is available in both English and Bengali. For privacy-related enquiries, please state at the outset that your query concerns a data protection or privacy matter so that the agent can escalate it to the appropriate team without delay.
• Email: [email protected] — Please include the subject line "Privacy Enquiry" or "Data Subject Request" as appropriate, along with your registered account username and a clear description of your request. f888 aims to acknowledge all privacy-related emails within 24 hours and to provide a substantive response within 30 calendar days.
• Operating hours: f888 operates under Bangladesh Standard Time (BST, UTC+6), 24 hours a day, seven days a week, including all public holidays recognised in Bangladesh.

When submitting a Subject Access Request or a data deletion request, please be prepared to verify your identity before f888 processes the request. This is a security measure to ensure that personal data is not disclosed to or deleted at the request of an unauthorised party. Identity verification for data rights requests is typically completed by confirming details that match the information held on your registered f888 account.

f888 is committed to resolving all privacy-related enquiries fairly, transparently, and within the timescales described in this Policy. If you are dissatisfied with f888's response to a privacy concern, you have the right to raise the matter as a formal complaint through the standard f888 dispute resolution process described in the Terms and Conditions.