88fe Privacy Policy

1 Introduction & Scope

This Privacy Policy (hereinafter "this Policy" or "the Privacy Policy") describes how 88fe (hereinafter "88fe", "the Platform", "we", "us", or "our") collects, uses, stores, shares, and protects personal data relating to individuals (hereinafter "you", "the Player", "the User") who visit, register on, or use the services available at 88fe.io.

This Policy applies to all personal data processed by 88fe in connection with the operation of the platform, including data collected through the website, through our customer support channels, through payment processing flows, and through your participation in games, tournaments, and promotional activities. It applies to all players who access 88fe from Bangladesh, which is the primary market for which this platform is designed and operated.

By registering an account on 88fe, depositing funds, or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue your use of the 88fe platform immediately.

This Privacy Policy should be read alongside the Terms and Conditions and the Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Policy and those documents on matters relating to personal data, this Privacy Policy shall take precedence.

2 Data Controller Identity

For the purposes of this Privacy Policy, 88fe acts as the data controller — the entity that determines the purposes and means of processing your personal data. All data subject requests, privacy enquiries, and formal complaints relating to data protection matters should be directed to the 88fe data team using the contact details provided in Section 15 of this Policy.

3 Data We Collect

88fe collects the following categories of personal data. We aim to collect the minimum data necessary for each stated purpose, and we do not retain data beyond the period required.

3.1 Identity & Registration Data

• Full legal name — as it appears on your government-issued identity document
• Date of birth — used to verify that you meet the 21+ age requirement
• Nationality and country of residence — Bangladesh residency is required
• Username — your chosen display identifier on the platform
• Password — stored as a one-way cryptographic hash; never stored in plain text

3.2 Contact Data

• Email address — used for account communications, security alerts, and promotional messages (where consented)
• Mobile phone number — registered Bangladesh mobile number; used for two-factor authentication and account recovery
• Residential address — including district, city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh), and postal code

3.3 Identity Verification (KYC) Data

• National Identity Card (NID) — front and back image
• Passport — biographical data page image, where NID is unavailable
• Proof of address documents — utility bills, bank statements, or official correspondence
• Selfie or liveness check — where required for enhanced verification

3.4 Financial & Transaction Data

• Payment method type and partial identifiers (e.g., last four digits of a card, registered mobile number for bKash/Nagad/Rocket)
• Deposit amounts, timestamps, and transaction reference numbers
• Withdrawal requests, amounts, and processing status
• Account balance history
• Bonus claims and wagering activity records

3.5 Gaming & Behavioural Data

• Game session logs — games played, bet amounts, win/loss outcomes, session durations
• Sports betting history — markets backed, odds accepted, outcomes
• Responsible gaming tool usage — deposit limits set, self-exclusion periods, reality check interactions
• In-platform search and navigation behaviour

3.6 Technical & Device Data

• IP address at time of registration, login, and each transaction
• Device type, operating system, and browser type and version
• Screen resolution and language settings
• Geolocation data (country/region level, derived from IP)
• Cookie identifiers and session tokens (see Section 9)

3.7 Communications Data

• Live chat transcripts between you and the 88fe support team
• Email correspondence relating to support requests, complaints, or account matters
• Feedback or survey responses submitted voluntarily

4 How We Collect Your Data

88fe collects personal data through several distinct channels, each described below.

• Direct submission: Data you provide actively when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automatic collection: Technical and device data collected automatically when you access the platform, including IP addresses, browser characteristics, and session cookies (see Section 9 for full cookie details).
• Payment processors: Transaction confirmation data, including payment status and reference numbers, received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard as part of processing your deposit or withdrawal.
• Identity verification providers: Where 88fe uses a third-party KYC verification service to check the authenticity of identity documents, that provider may return a verification result and any data fields extracted from the submitted document.
• Responsible gaming tools: Data generated by your own use of deposit limits, session limits, self-exclusion tools, and reality check features within your account dashboard.
• Analytics tools: Aggregated, anonymised behavioural data collected via first-party analytics to understand platform usage patterns and improve the user experience. This data is not linked to your personal identity.

5 How We Use Your Data

The following table summarises the primary purposes for which 88fe uses your personal data and the corresponding data categories involved.

88fe does not use your personal data for automated decision-making that produces legal or similarly significant effects without human oversight. Where automated screening is used as part of fraud or AML monitoring, any account action resulting from a positive flag is reviewed by a member of the 88fe compliance team before being executed.

6 Legal Basis for Processing

88fe processes your personal data on the following legal bases, which vary depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil the contract between you and 88fe — i.e., to provide the betting and casino service you have registered for. This covers account management, transaction processing, and customer support.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, fraud prevention obligations, and any lawful requests from competent authorities.
• Legitimate interests: Processing necessary for the legitimate interests pursued by 88fe, provided those interests are not overridden by your fundamental rights and freedoms. This includes fraud detection, platform security, responsible gaming monitoring, and improving the platform experience.
• Consent: Where we process your data on the basis of consent — for example, sending you personalised promotional communications by email — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

7 Sharing Your Data

88fe does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited and controlled circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard receive the minimum data required to process your transactions. They act as independent data controllers for their own processing and are subject to their own privacy policies.
• Identity verification providers: Third-party KYC and document verification vendors receive the identity documents you submit for verification. These vendors are engaged under strict data processing agreements that limit their use of data solely to the KYC service.
• Game software providers: Game studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi receive your username and session tokens to deliver game content within the platform. They do not receive your financial, KYC, or contact data.
• Fraud prevention and AML screening: Certain technical and transactional data may be shared with fraud screening services for the purpose of detecting and preventing financial crime.
• Legal and regulatory authorities: 88fe will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law, by court order, or by a valid legal process. We will notify you of any such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of 88fe's business assets, player data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer and of any changes to this Privacy Policy that result from it.

All third parties with whom 88fe shares personal data are required to maintain appropriate technical and organisational security measures and to process data only in accordance with 88fe's instructions and applicable law.

8 Payment Data

The security of your payment information is a top priority at 88fe. The following specific practices apply to the handling of payment data:

• No full card storage: 88fe does not store full card numbers, CVV codes, or card PINs on its own systems. Card payment processing is handled entirely by PCI-DSS compliant payment processors.
• Mobile wallet identifiers: For bKash, Nagad, Rocket, and Upay transactions, 88fe stores only the registered mobile number associated with the wallet and the transaction reference number returned by the payment provider. Full wallet credentials are never stored or transmitted through 88fe servers.
• Bank account details: For bank transfer transactions via Dutch-Bangla Bank, City Bank, BRAC Bank, and others, 88fe retains only the bank name, account number (masked), and transaction reference. Full banking credentials are not required and not stored.
• Transaction records: Deposit and withdrawal records — including amounts in BDT, timestamps, and method identifiers — are retained for a minimum of 5 years for AML compliance purposes.

9 Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit, such as your preferred settings, your logged-in status, and your activity during the session. 88fe uses cookies and similar tracking technologies (including local storage and session storage) to operate the platform effectively and to improve your experience.

9.2 Types of Cookies We Use

9.3 Managing Cookies

You can manage or delete cookies through your browser settings. Most modern browsers allow you to block third-party cookies, clear all cookies on exit, or receive a notification when a cookie is set. Please note that disabling essential cookies will impair your ability to log in and use core platform features. Disabling functional cookies will mean the platform cannot remember your preferences between sessions. Analytics and fraud detection cookies can be disabled without affecting your access to the main betting and gaming features.

10 Data Retention

88fe retains your personal data for as long as is necessary for the purposes set out in this Privacy Policy, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your account and for a minimum of 5 years after account closure, in accordance with AML record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years from the date of verification, or from the date of account closure, whichever is later.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Customer support communications: Retained for up to 3 years from the date of the last communication in a given thread, or for the duration required to resolve a formal dispute.
• Game session logs: Retained for a minimum of 2 years for dispute resolution purposes.
• Marketing consent records: Retained for the duration of your consent and for 3 years following withdrawal, as evidence of compliance.
• Anonymised analytics data: May be retained indefinitely, as it cannot be linked to any individual.

Upon expiry of the applicable retention period, personal data is either securely and irreversibly deleted or anonymised so that it can no longer be associated with any identifiable individual.

11 Data Security

88fe implements a multi-layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• Transport Layer Security (TLS): All data transmitted between your browser or app and the 88fe servers is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock icon in your browser confirms this encryption is active during your session.
• Encrypted data storage: Sensitive fields including passwords (stored as salted cryptographic hashes), KYC document images, and payment method identifiers are encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within 88fe is restricted to staff who have a demonstrated need to access it as part of their defined role. Role-based access control (RBAC) is enforced, and all internal data access is logged and audited.
• Two-factor authentication: 2FA is available for all player accounts and is strongly recommended. Internal staff with access to sensitive systems are required to use 2FA.
• Network security: The platform is protected by web application firewalls (WAF), intrusion detection systems, and DDoS mitigation controls. Vulnerability scans and penetration tests are conducted on a regular schedule.
• Incident response: 88fe maintains a documented data breach response procedure. In the event of a confirmed breach that is likely to result in risk to affected individuals, we will notify impacted users as promptly as practicable via their registered email address.

While 88fe takes every reasonable precaution to protect your data, no transmission over the internet or electronic storage system is completely immune from risk. Players are encouraged to maintain strong, unique passwords and to enable 2FA to maximise the security of their own accounts.

12 Your Rights

As a data subject, you hold the following rights in relation to your personal data held by 88fe. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Request" and a clear description of the right you wish to exercise.

• Right of access: You have the right to request a copy of the personal data 88fe holds about you, along with information about how it is used and with whom it is shared. We will provide this in a structured, commonly used format within 30 days of your request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Identity-critical fields such as your legal name and date of birth may require re-submission of KYC documents to complete the correction.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing based on legitimate interests and no overriding grounds exist. This right is subject to our legal obligation to retain certain records — for example, AML-mandated transaction records cannot be deleted before the statutory retention period expires.
• Right to restriction of processing: You may request that we restrict processing of your data in certain circumstances — for example, while you contest the accuracy of data we hold, or while an objection is being assessed. During the restriction period, we will store the data but not actively process it beyond storage.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format and to transmit it to another service provider where technically feasible.
• Right to object: You have the right to object at any time to processing of your personal data that is based on our legitimate interests, including profiling for fraud prevention or responsible gaming monitoring purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based solely on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing. To withdraw marketing consent, update your preferences in your account dashboard or contact our support team.
• Right not to be subject to automated decisions: You have the right not to be subject to a decision based solely on automated processing — including profiling — that produces legal or similarly significant effects. 88fe does not make account suspension or closure decisions without human review of automated flags.

We may ask you to verify your identity before processing a data subject request. This is to protect you from unauthorised third-party access to your personal data. Identity verification for data subject requests follows the same process as our standard account verification procedure.

13 Children & Minors

The 88fe platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from any individual under the age of 21. Age verification is a mandatory step in the account registration process, and 88fe reserves the right to request additional proof of age documentation at any time if there is a reasonable basis to suspect that a player may be under the minimum age.

If 88fe discovers or is notified that a player has provided false information about their age and is in fact under 21, we will immediately suspend the account, reverse any outstanding withdrawals pending investigation, and securely delete all personal data associated with the underage account as soon as legally permissible.

If you are a parent or guardian and have reason to believe that a minor in your care has registered an account on 88fe, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate and take appropriate action as a matter of priority.

14 Changes to This Policy

88fe reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or improvements to the platform. When we make changes, we will update the "Last updated" date displayed in the hero section of this page and publish the revised Policy at 88fe.io/privacy-policy.

For material changes — those that meaningfully alter how we collect, use, or share your personal data, or that affect your rights as a data subject — we will provide advance notice by sending a notification to your registered email address at least 14 days before the changes take effect. For non-material updates such as typographical corrections, clarifications of existing practices, or administrative amendments, we may update the Policy without prior notice beyond updating the revision date.

Your continued use of the 88fe platform after the effective date of any updated Privacy Policy constitutes your acknowledgement and acceptance of the revised terms. If you do not accept the revised Privacy Policy, you must cease using the platform and may request account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically — particularly before making deposits or sharing additional personal information with the platform — to ensure you remain informed about how your data is handled.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data 88fe holds about you, please reach out using the contact details below. All contact information is provided as plain text — these are not clickable links.

• General privacy enquiries: [email protected] — subject line "Privacy Enquiry" — response within 48 hours (BST business days)
• Data subject requests (access, correction, deletion, portability): [email protected] — subject line "Privacy Request" — acknowledged within 48 hours, fulfilled within 30 days
• Formal data protection complaints: [email protected] — subject line "Data Protection Complaint" — acknowledged within 48 hours, full written response within 7 BST business days
• Live chat: Available within your 88fe account dashboard, 24 hours a day, 7 days a week, for immediate privacy-related questions
• Business hours for written responses: 09:00 – 21:00 Bangladesh Standard Time (BST, UTC+6), every day of the week

88fe is committed to resolving all privacy concerns promptly and transparently. If you feel your concern has not been addressed to your satisfaction after contacting us, you retain the right to seek independent legal advice or pursue any remedies available to you under applicable law.