ff88 Privacy Policy

This Privacy Policy ("Policy") is issued by ff88, the operator of the online casino and sports betting platform accessible at https://ff88.cam ("Platform"). It describes how ff88 collects, uses, stores, shares, and protects personal data in connection with your use of the Platform, and sets out the rights you hold with respect to that data.

By registering an account on ff88, completing our identity verification process, making a deposit, or otherwise interacting with the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and ff88.

ff88 is the data controller for the personal information collected through the Platform. If you have any questions about this Policy or how your data is handled, please contact us at [email protected].

ff88 collects personal data through several channels: directly from you during registration and account management, automatically through your use of the Platform, and from third-party service providers engaged in identity verification and payment processing. The categories of data we collect are outlined in the table below.

ff88 does not intentionally collect sensitive categories of personal data such as health information, racial or ethnic origin, political opinions, religious beliefs, or biometric data for the purpose of unique identification, except to the limited extent that a government-issued ID submitted for KYC purposes may incidentally contain such information.

ff88 uses the personal data we collect for clearly defined, legitimate purposes. We do not use your data for any purpose incompatible with the purpose for which it was originally collected without obtaining your prior consent. The primary purposes for which your data is used are as follows:

• Account creation and management: To register your account, verify your identity, maintain your account profile, and process changes to your account settings.
• Transaction processing: To process deposits made via bKash, Nagad, Rocket, Upay, or card, and to process withdrawal requests to your nominated payment method in BDT.
• Identity verification (KYC): To verify that you meet the eligibility requirements to use the Platform, including age verification (18+) and confirmation that you are registering in your own name.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, unauthorised account access, and other prohibited conduct.
• Responsible gaming compliance: To honour self-exclusion requests, enforce deposit limits you have set, monitor for indicators of problem gambling behaviour, and comply with responsible gaming obligations.
• Customer support: To respond to your queries, resolve complaints, and maintain records of support interactions for quality assurance.
• Platform improvement: To analyse aggregated, anonymised usage data to identify trends, improve game offerings, optimise user experience, and fix technical issues.
• Marketing communications: To send you promotional offers, bonus notifications, and seasonal promotions from ff88 — only where you have given your explicit consent to receive such communications.
• Legal and regulatory compliance: To fulfil obligations imposed by applicable laws, including responding to lawful requests from regulatory or law enforcement authorities.

ff88 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you accepted at registration — for example, processing your deposits and withdrawals, operating your account, and providing access to games.
• Legal obligation: Processing required to comply with applicable laws — for example, retaining financial transaction records, conducting KYC identity verification, and responding to lawful authority requests.
• Legitimate interests: Processing carried out in pursuit of ff88's legitimate business interests where those interests are not overridden by your fundamental rights — for example, fraud prevention, platform security monitoring, and aggregated analytics for service improvement.
• Consent: Processing based on your explicit, freely given, specific, and informed consent — for example, sending you marketing emails or SMS promotions. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

ff88 does not sell, rent, or commercially disclose your personal data to third parties. Data sharing is strictly limited to the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — for the sole purpose of processing your financial transactions.
• Identity verification providers: Third-party KYC service providers engaged to verify your identity documents and confirm your eligibility. These providers process your data under confidentiality agreements and are not permitted to use your data for their own purposes.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified studios — who receive the minimum data necessary to deliver game sessions (typically a session token, not your full identity details).
• IT and infrastructure providers: Cloud hosting, server management, and cybersecurity service providers who maintain the technical infrastructure of the Platform under strict data processing agreements.
• Legal and regulatory authorities: Law enforcement agencies, financial intelligence units, or courts where disclosure is required by a lawful order or applicable law. ff88 will notify you of such disclosure where legally permitted to do so.

ff88 uses cookies and similar tracking technologies to operate the Platform effectively, improve user experience, and support fraud detection. A cookie is a small text file placed on your device by the Platform when you visit. The types of cookies used by ff88 are described below:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during your visit and security cookies that help detect fraudulent activity. These cookies cannot be disabled without preventing the Platform from operating correctly.
• Functional cookies: Enable the Platform to remember your preferences, such as your language setting, display preferences, and last-visited game category, to provide a more personalised experience.
• Analytics cookies: Collect anonymised data about how players navigate the Platform — pages visited, time spent, and features used — to help ff88 understand usage patterns and improve the service. This data is aggregated and not linked to your individual identity.
• Marketing cookies: Used only where you have provided explicit consent. These cookies help ff88 assess the effectiveness of promotional campaigns and deliver relevant offers. You may opt out of marketing cookies at any time via your account notification settings.

You can control cookie behaviour through your browser settings. Disabling strictly necessary cookies may impair Platform functionality. ff88 does not currently respond to browser-level "Do Not Track" signals, as no universally accepted standard exists for interpreting such signals.

ff88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• Transport encryption: All data transmitted between your device and the ff88 platform is encrypted using 256-bit SSL/TLS protocols. The Platform enforces HTTPS on all pages without exception.
• Password storage: Account passwords are stored using industry-standard cryptographic hashing algorithms. Plain-text passwords are never stored or accessible to ff88 staff.
• Access controls: Access to personal data within ff88's internal systems is restricted on a need-to-know basis. Staff access is governed by role-based permissions and is subject to audit logging.
• Infrastructure security: ff88's server infrastructure is hosted in secured data centres with physical access controls, intrusion detection systems, and regular independent security audits.
• Fraud monitoring: Automated systems monitor account activity in real time for indicators of fraud, account takeover, and suspicious financial patterns, with human review triggered for flagged cases.

While ff88 takes all reasonable precautions to protect your data, no internet-based platform can guarantee absolute security. You play an important role in protecting your own data by maintaining a strong, unique password for your ff88 account and not sharing your login credentials or OTPs with any other person.

ff88 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required to comply with applicable legal and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, to satisfy financial record-keeping and anti-money laundering obligations.
• Transaction records: Deposit and withdrawal transaction logs are retained for a minimum of five (5) years from the date of the transaction.
• KYC documents: Identity verification documents are retained for a minimum of five (5) years following submission or account closure, whichever is later.
• Support communications: Customer support interactions are retained for three (3) years from the date of the interaction, or longer if the interaction relates to a dispute that remains unresolved.
• Marketing consent records: Records of your consent to or withdrawal from marketing communications are retained for the duration of your account plus three (3) years, to demonstrate compliance with consent obligations.
• Technical/log data: Server logs and technical access data are retained for up to twelve (12) months, after which they are anonymised or deleted.

Once the applicable retention period has expired and there is no legitimate reason to retain the data further, ff88 will securely delete or anonymise your personal data in accordance with our internal data disposal procedures.

As a player on ff88, you hold the following rights with respect to the personal data we process about you. To exercise any of these rights, please contact our support team at [email protected] with your registered account details and a clear description of your request.

ff88 will acknowledge all data rights requests within 48 hours and aim to fulfil verified requests within 30 calendar days. We may request proof of identity before processing a rights request to prevent fraudulent access to another player's data. Where a request is refused, we will explain the reason in writing.

The ff88 Platform is strictly intended for individuals aged 18 years and above. ff88 does not knowingly collect personal data from individuals under the age of 18. If you are under 18, you must not register an account, make a deposit, or use any feature of the Platform.

If ff88 becomes aware, through its age verification processes or by any other means, that a user is under 18, the account will be closed immediately, all balances will be forfeited, and any personal data collected from that individual will be deleted promptly. Parents or guardians who have reason to believe that a minor has registered an account on ff88 should contact us immediately at [email protected] so that the account can be closed and the data erased.

The ff88 Platform may contain references to or integrations with third-party services, including payment processors such as bKash and Nagad, and game providers such as Pragmatic Play and Evolution Gaming. While ff88 selects its third-party partners carefully, this Privacy Policy applies solely to data processed by ff88 as the data controller.

When you interact directly with a third-party payment interface or game provider interface embedded within the Platform, that third party's own privacy policy will govern the processing of any data they collect during that interaction. ff88 recommends that you review the privacy notices of any third-party providers whose services you access through the Platform.

ff88 is not responsible for the privacy practices of third-party game providers, payment processors, or any other external services, and makes no representations as to the content or accuracy of those parties' privacy policies.

ff88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the services we offer. When material changes are made to this Policy, ff88 will notify registered players via the email address associated with their account and will display a prominent notice on the Platform for a period of not less than 7 days prior to the updated Policy taking effect.

The "Last Updated" date shown at the top of this page indicates when the most recent revision was made. We encourage you to review this Policy periodically to stay informed about how ff88 protects your data. Your continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the revised terms.

If you disagree with any changes made to this Policy, you have the right to close your account before the revised Policy takes effect and to request deletion of your personal data subject to ff88's legal retention obligations.

If you have any questions, concerns, or requests related to this Privacy Policy or the way ff88 handles your personal data, please get in touch with our Data Protection team. We are committed to handling all privacy enquiries promptly and transparently.

• Email: [email protected] (plain text — not a clickable link)
• Response time: Email queries acknowledged within 48 hours; data rights requests fulfilled within 30 calendar days
• Live support: Available 24/7 via the live chat feature inside your ff88 account dashboard
• Operating hours: Bangladesh Standard Time (BST, UTC+6)

When contacting us about a data privacy matter, please include your registered username and a clear description of your request or concern so we can assist you efficiently. Proof of identity may be required before personal data requests are actioned.