88fba Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 88fba ("we", "us", "our", "the Platform") collects, processes, stores, and protects personal data submitted by or collected from players ("you", "your") who access or use the 88fba website, mobile applications, and all associated services. This Policy is effective from 1 January 2026.

88fba operates an online casino and sports betting platform serving adult players in Bangladesh. As part of operating this service, we necessarily collect and process certain categories of personal data. We take our obligations as a data controller seriously and handle all personal information with care, integrity, and in accordance with applicable data protection principles.

By registering for an 88fba account, accessing the platform, or using any of our services, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not consent to this Policy, you must not register an account or use the 88fba platform.

This Policy should be read in conjunction with the 88fba Terms & Conditions, available at 88fba.io/terms-conditions, and the Responsible Gaming Policy at 88fba.io/responsible-gaming. All time references in this Policy are Bangladesh Standard Time (BST, UTC+6).

2. Personal Data We Collect

88fba collects personal data across several categories depending on how you interact with the platform. The following table summarises the categories of personal data we collect:

3. How We Collect Your Data

88fba collects personal data through the following means:

• Direct submission: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in promotions, you directly provide us with personal data.
• Automated collection: When you use the 88fba platform, we automatically collect technical and usage data via server logs, cookies, web beacons, and similar tracking technologies (see Section 7 for full cookie details).
• Third-party providers: We receive data from payment processors (bKash, Nagad, Rocket, Upay, bank partners, Visa, Mastercard) to confirm the success or failure of transactions. We may also receive identity verification data from KYC service providers.
• Public sources: In certain fraud prevention and compliance contexts, we may cross-reference data against publicly available sources such as sanctions lists, politically exposed persons (PEP) databases, and public court records.

4. Legal Basis for Processing

88fba processes personal data on the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between you and 88fba — specifically to maintain your account, process payments, and deliver the services you have requested.
• Legal obligation: Processing is required to comply with applicable laws, including anti-money laundering obligations, financial record-keeping requirements, and regulatory reporting duties.
• Legitimate interests: Processing is necessary for 88fba's legitimate business interests, such as fraud detection, platform security, responsible gaming monitoring, and business analytics — provided those interests are not overridden by your fundamental rights.
• Consent: Where we rely on consent — for example, sending you marketing emails or SMS promotions — we will obtain your explicit consent and you may withdraw it at any time by contacting [email protected] or updating your account notification preferences.

5. How We Use Your Personal Data

88fba uses the personal data we collect for the following purposes:

• Account creation and management: Creating and maintaining your player account, authenticating your identity at login, and enabling you to access all platform features.
• Identity and age verification: Confirming that you are a real person aged 21 or above and that all account information is accurate, as required under our responsible gaming obligations.
• Payment processing: Facilitating BDT deposits and withdrawals through bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. Matching payment methods to account holders to prevent fraud.
• Customer support: Responding to your enquiries, resolving disputes, processing complaints, and maintaining records of your interactions with our support team.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling behaviour, enforcing deposit limits and self-exclusion settings, and proactively reaching out to players who may be at risk.
• Security and fraud prevention: Detecting and preventing unauthorised access, duplicate accounts, bonus abuse, money laundering, and other prohibited activities. Investigating suspicious transactions and account behaviour.
• Personalisation: Customising your platform experience, including game recommendations, promotional offers relevant to your preferences, and language and currency settings appropriate for players in Bangladesh.
• Marketing communications: Sending you information about new games, seasonal promotions (such as Eid, Pohela Boishakh, and BPL season offers), bonus offers, and platform updates — only where you have opted in to receive such communications.
• Legal and regulatory compliance: Meeting our obligations under applicable financial, anti-money laundering, data protection, and gaming-related laws and regulations.
• Platform improvement: Analysing aggregated usage data to understand how players interact with the platform, identify bugs, test new features, and improve the overall user experience.

6. Data Sharing & Third Parties

6.1 Who We Share Data With

88fba does not sell, rent, or trade your personal data to third-party advertisers or data brokers under any circumstances. We share personal data only in the following limited contexts:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive transaction data necessary to process your deposits and withdrawals. Each of these providers operates under their own privacy policy and applicable financial regulations.
• Identity verification providers: Third-party KYC and anti-money laundering service providers receive identity documents and data you submit during the verification process. These providers are contractually bound to handle data securely and for the stated verification purpose only.
• Game studios and content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised technical data (such as session identifiers and game outcomes) necessary for game delivery, fair-play certification, and RNG auditing. They do not receive your personally identifiable account information unless required for dispute resolution.
• Regulatory and law enforcement authorities: We may be legally required to disclose personal data to government authorities, financial intelligence units, or law enforcement agencies upon receipt of a valid legal order or regulatory demand. We will notify you of such disclosures where legally permitted to do so.
• Professional advisers: Our legal counsel, auditors, and accountants may access personal data as necessary to provide professional services to 88fba, subject to strict confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of assets, personal data held by 88fba may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

6.2 No Third-Party Marketing

88fba will never share your personal data with third parties for their own independent marketing purposes. Any promotional communications you receive will come from 88fba directly, and only where you have consented to receive them.

7. Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit the 88fba website or use our mobile application. They help us recognise your device, remember your preferences, keep you logged in securely, and understand how you use the platform so we can improve it.

7.2 Types of Cookies We Use

7.3 Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers allow you to refuse cookies, delete existing cookies, or notify you when new cookies are set. Please note that disabling strictly necessary cookies will impair platform functionality, including the ability to log in and place bets. For instructions specific to your browser, refer to the help documentation of Chrome, Firefox, Safari, or your chosen browser.

8. Data Retention

88fba retains personal data for the following periods:

• Active accounts: All personal data associated with an active player account is retained for the full duration of the account's activity.
• Closed accounts: Following account closure — whether voluntary or due to a Terms breach — 88fba retains your personal data for a minimum of 5 years from the date of closure. This retention period is necessary to comply with financial record-keeping obligations, respond to potential legal claims, and satisfy anti-money laundering regulations.
• KYC documents: Identity verification documents are retained for a minimum of 5 years from account closure in accordance with financial compliance requirements.
• Support communications: Chat transcripts and email correspondence with the support team are retained for 3 years from the date of the interaction.
• Marketing data: If you withdraw consent for marketing communications, your marketing preference data (opt-out record) is retained indefinitely to ensure we do not inadvertently re-contact you. The underlying personal data used for marketing will be suppressed.
• Technical logs: Server access logs and security event logs are retained for 12 months for operational and security purposes.

On expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where technical constraints prevent immediate deletion, we will ensure the data is isolated from active processing until it can be permanently removed.

9. Data Security

88fba implements industry-standard and best-practice technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in transit: All data transmitted between your device and 88fba servers is encrypted using 256-bit SSL/TLS protocols. Our SSL certificate is issued by a trusted Certificate Authority and is kept up to date at all times.
• Encryption at rest: Sensitive personal data — including financial details, identity documents, and passwords — is stored in encrypted form in access-controlled databases. Passwords are hashed using industry-standard one-way algorithms and are never stored in plaintext.
• Access controls: Access to personal data is restricted to 88fba employees and contractors who require it to perform their job functions. Role-based access controls and multi-factor authentication are enforced for all internal system access.
• Regular security audits: 88fba conducts periodic internal security reviews and engages independent third-party specialists to perform penetration testing and vulnerability assessments of the platform infrastructure.
• Incident response: In the event of a confirmed data breach that poses a risk to your personal data, 88fba will notify affected players without undue delay and take all necessary remediation steps.
• Two-factor authentication (2FA): Players are strongly encouraged to enable 2FA on their accounts via mobile OTP. 2FA significantly reduces the risk of unauthorised account access even if your password is compromised.

While 88fba takes all reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. You are responsible for keeping your account credentials confidential and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

10. Your Data Rights

As a player on the 88fba platform, you have the following rights with respect to your personal data:

• Right of access: You may request a copy of the personal data we hold about you. We will provide this within a reasonable timeframe, ordinarily within 30 days of receiving a valid request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Contact [email protected] with supporting evidence where applicable.
• Right to erasure: You may request deletion of your personal data where (a) it is no longer necessary for the purposes for which it was collected, (b) you withdraw consent and there is no other legal basis for processing, or (c) the data has been unlawfully processed. Note that we may be unable to delete certain data where retention is required by law.
• Right to restrict processing: You may request that we temporarily restrict processing of your data while a dispute about its accuracy or our right to process it is resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and include your registered email address and account username so we can verify your identity before processing the request. We aim to respond to all data rights requests within 30 days.

11. Protection of Minors

88fba operates an adults-only platform. Players must be at least 21 years of age to register, access, or use any 88fba service. We do not knowingly collect personal data from individuals under the age of 21.

During account registration, all players are required to declare their date of birth. 88fba reserves the right to request documentary proof of age (such as a National ID card or passport) at any time and to suspend account access pending age verification. Where we discover that an account has been registered by an individual under 21, the account will be closed immediately, all transactions will be voided, and any deposited funds will be returned to the original payment source.

Parents and guardians who believe that a minor has registered for or accessed an 88fba account should contact us immediately at [email protected] so we can take appropriate action without delay.

12. International Data Transfers

88fba primarily stores and processes player data within secure data centre infrastructure serving the Bangladesh region. However, some of our third-party service providers — including KYC verification specialists, cloud infrastructure providers, and game studio partners — may process data in other jurisdictions.

Where personal data is transferred outside Bangladesh, 88fba ensures that appropriate safeguards are in place to maintain an equivalent level of data protection. These safeguards may include contractual data processing agreements incorporating standard data protection clauses, data processing addenda with third-party providers, or transfers to providers operating in jurisdictions that maintain adequate data protection standards.

By using the 88fba platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Bangladesh, subject to the safeguards described above.

13. Changes to This Privacy Policy

88fba reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. The "Last updated" date at the top of this document will be revised whenever changes are made.

For material changes that significantly affect your rights or how we process your personal data, we will notify registered players via email to the address on file and/or by a prominent notice on the 88fba platform before the updated policy takes effect. Minor clarifications or formatting changes may be made without prior notice.

Your continued use of the 88fba platform after the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised policy, you must cease using the platform and request account closure before the changes take effect.

14. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or how 88fba handles your personal data, please contact our Data Protection team through the following channels:

• Email: [email protected] (plain text — copy and paste into your email client; this is not a clickable link)
• Subject line for data requests: "Privacy Policy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 via the 88fba platform chat interface
• Response time: We aim to respond to all privacy-related enquiries within 5 business days. Formal data rights requests will be handled within 30 days of identity verification.

88fba treats all privacy enquiries with the highest level of priority and confidentiality. Our support team is available in English, 9AM – Midnight daily, Bangladesh Standard Time (BST, UTC+6).