88fa Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1. Introduction

Welcome to 88fa ("we", "us", "our"). We operate the online gambling platform accessible at 88fa.bar and are committed to handling the personal data of every player with transparency, care, and respect. This Privacy Policy ("Policy") describes what personal information 88fa collects, the purposes for which it is used, with whom it may be shared, and the choices and rights available to you as a data subject.

This Policy applies to all individuals who visit, register with, or interact with the 88fa platform, including players based in Bangladesh who use bKash, Nagad, Rocket, and other local payment methods. By creating an account or continuing to use the 88fa platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which govern your broader relationship with 88fa.

2. Data We Collect

88fa collects personal data across two broad categories: information you provide to us directly, and information generated automatically through your use of the platform.

2.1 Information You Provide Directly

• Registration data: full legal name, date of birth, gender, nationality, email address, and mobile number provided when creating an account.
• Identity verification (KYC) data: copies of government-issued national ID card or passport, proof of residential address (utility bill or bank statement), and proof of payment method ownership.
• Payment data: bKash wallet number, Nagad number, Rocket number, Upay number, bank account details, or card number (partial, tokenised) used for deposits and withdrawals in Bangladeshi Taka (BDT).
• Communications data: the content of messages, emails, and live chat transcripts exchanged with our customer support team.
• Responsible gaming data: deposit limits, loss limits, session time preferences, cooling-off periods, and self-exclusion requests you submit through your account settings.

2.2 Information Collected Automatically

• Technical data: IP address, device type, operating system, browser type and version, screen resolution, and time zone setting.
• Usage data: pages visited, games played, wagers placed, session duration, click-stream data, and platform navigation paths.
• Transaction data: deposit amounts, withdrawal amounts, bonus usage, wagering history, and account balance movements.
• Cookie data: session tokens, authentication cookies, and first-party analytics cookies as described in Section 7 of this Policy.

3. How We Collect Data

88fa collects personal data through the following channels:

• Account registration form: when you complete the sign-up process on the 88fa platform.
• KYC verification portal: when you upload identity documents in response to a verification request.
• Cashier / payment gateway: when you initiate a deposit or withdrawal transaction.
• Customer support channels: when you contact our team via email at [email protected] or through the on-site live chat feature.
• Automated platform technology: cookies, server logs, and similar tracking technologies that record your interaction with the platform as you navigate and play.
• Third-party payment providers: bKash, Nagad, Rocket, Upay, and card networks may share transaction confirmation data with us to reconcile your deposit or withdrawal.

4. How We Use Your Data

88fa uses the personal data it collects for clearly defined operational purposes. We do not use your data in ways that are incompatible with the purposes stated at the time of collection. The primary purposes for which we process your data are as follows:

Purpose	Data Used
Creating and managing your account	Registration data, contact details
Processing deposits and withdrawals in BDT	Payment data, transaction history
Identity verification (KYC / AML compliance)	KYC documents, registration data
Providing customer support	Communications data, account data
Detecting and preventing fraud and money laundering	Technical data, transaction data, IP address
Enforcing responsible gaming limits and self-exclusions	Responsible gaming data, usage data
Improving platform performance and user experience	Usage data, cookie data, technical data
Sending transactional communications (deposit confirmations, withdrawal notices)	Contact details, transaction data
Sending promotional communications (with your consent)	Contact details, game preference data
Legal compliance and dispute resolution	All categories as required

5. Legal Basis for Processing

88fa processes your personal data on the following legal bases:

• Contractual necessity: processing required to fulfil our obligations under the account agreement with you — including account creation, payment processing, and customer support.
• Legal obligation: processing required to comply with applicable anti-money laundering (AML), know-your-customer (KYC), and fraud prevention obligations.
• Legitimate interests: processing necessary for fraud detection, platform security, responsible gaming enforcement, and internal analytics — where these interests are not overridden by your data protection rights.
• Consent: processing for optional purposes such as sending promotional emails or SMS about bonuses, new games, or seasonal offers — where you have provided explicit, freely given consent and may withdraw it at any time.

6. Data Sharing & Disclosure

6.1 Authorised Third-Party Service Providers

88fa shares personal data with carefully selected third-party service providers who assist us in operating the platform. These providers are permitted to use your data only to perform services on our behalf and are contractually required to protect it in accordance with standards equivalent to this Policy. Categories of authorised providers include:

• Payment processors and e-wallet platforms (bKash, Nagad, Rocket, Upay, Visa, Mastercard networks).
• Identity verification and KYC technology providers.
• Fraud detection and anti-money laundering screening services.
• Cloud hosting and server infrastructure providers.
• Customer support platform operators.
• Platform analytics providers (first-party analytics only; no third-party advertising networks).

6.2 Legal Disclosures

88fa may disclose your personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction when required to do so by applicable law, lawful court order, or to protect the legal rights, safety, and property of 88fa, its players, or the public.

6.3 Business Transfers

In the event that 88fa undergoes a merger, acquisition, or sale of all or a substantial portion of its assets, player data may be transferred to the successor entity. We will notify affected players by email before any such transfer takes effect and will ensure the receiving entity agrees to uphold the standards of this Privacy Policy.

6.4 No Sale of Personal Data

88fa does not sell, rent, or trade your personal data to any third party for that party's own marketing or commercial purposes. This commitment is unconditional and applies regardless of the commercial value of the data involved.

7. Cookies & Tracking Technologies

7.1 What Cookies We Use

88fa uses the following categories of cookies on the platform:

• Essential cookies: session tokens and authentication cookies required for the platform to function. Without these cookies, you cannot log in, maintain a session, or use the cashier. These cookies cannot be disabled.
• Performance cookies: first-party analytics cookies that record aggregate, anonymised usage data (e.g., page load times, most-visited game categories). This data is used solely to improve platform performance and is not linked to your identity.
• Security cookies: cookies used by our fraud detection systems to identify unusual login patterns or suspicious transaction behaviour. These cookies protect your account and the integrity of the platform.

7.2 What We Do Not Use

88fa does not use third-party advertising cookies, cross-site tracking pixels, social media tracking widgets, or any cookie technology that enables third parties to build a profile of your browsing habits outside the 88fa platform. We do not use Google Ads remarketing cookies, Facebook Pixel, or equivalent advertising trackers.

7.3 Managing Cookies

You may control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies; however, disabling essential cookies will prevent you from accessing core platform features including account login. Consult your browser's help documentation for instructions on managing cookie preferences.

8. Data Retention

88fa retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or legitimate operational necessity. Our standard retention periods are as follows:

• Account and registration data: retained for the duration of the active account relationship and for a period of five (5) years following account closure, to satisfy anti-money laundering record-keeping requirements.
• Transaction and payment data: retained for seven (7) years from the date of the transaction, in accordance with standard financial record-keeping obligations.
• KYC verification documents: retained for five (5) years following the submission of the documents or account closure, whichever is later.
• Customer support communications: retained for three (3) years from the date of the communication, to enable resolution of any future disputes.
• Platform usage and analytics data: anonymised and aggregated after 24 months; individual-level usage logs are deleted after 12 months.
• Self-exclusion records: retained permanently to prevent re-registration during the exclusion period and to maintain accurate responsible gaming history.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised using industry-standard methods.

9. Data Security

88fa implements a layered technical and organisational security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures in place include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the 88fa platform.
• Encryption at rest for all sensitive personal data and payment records stored on our servers.
• Role-based access controls ensuring that 88fa staff can access only the data necessary to perform their specific job functions.
• Regular penetration testing and security audits conducted by independent security professionals.
• Intrusion detection systems and real-time security monitoring to identify and respond to threats promptly.
• Multi-factor authentication requirements for all internal administrative access to player data systems.

While 88fa takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, 88fa will notify affected players without undue delay and in accordance with applicable notification obligations.

10. Your Rights

Subject to applicable law, you have the following rights in respect of the personal data 88fa holds about you:

• Right of access: you may request a copy of all personal data 88fa holds about you.
• Right to rectification: you may request correction of any inaccurate or incomplete personal data.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to data portability: you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to restrict processing: you may request that we limit the processing of your data in certain circumstances, such as while a dispute over accuracy is being resolved.
• Right to object: you may object to processing based on legitimate interests and to direct marketing at any time.
• Right to withdraw consent: where processing is based on your consent (e.g., promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact our support team at [email protected]. We will acknowledge your request within 5 business days and provide a substantive response within 30 days. In complex cases, this period may be extended by a further 30 days with prior notification to you.

11. Children & Minors

The 88fa platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the 88fa platform, please notify us immediately at [email protected].

12. Third-Party Links

The 88fa platform may contain references to game providers and payment partners (such as Pragmatic Play, Evolution Gaming, bKash, and Nagad) whose own privacy practices are governed by their respective privacy policies. 88fa is not responsible for the data practices of any third-party entity. We encourage you to review the privacy policy of any third-party service you interact with in connection with your use of the 88fa platform.

13. Policy Amendments

88fa reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will notify registered players by email to the address on file and will post a prominent notice on the platform for a period of no less than 14 days before the revised Policy takes effect.

Your continued use of the 88fa platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should cease using the platform and request account closure before the effective date.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 88fa handles your personal data, please contact our dedicated privacy support team. We respond to all privacy-related enquiries in English during Bangladesh Standard Time (BST, UTC+6) business hours.

Email: [email protected] (plain text — not a clickable link)

Please include your registered account username, the nature of your privacy enquiry, and any relevant reference information. We aim to acknowledge all privacy enquiries within 48 hours and to provide a full response within 30 calendar days.