Privacy Policy — How 88fi Protects Your Personal Data

This Privacy Policy describes how 88fi (the "Platform", "We", "Us", or "Our"), operator of the online casino and sports betting services available at https://88fi.io (the "Website"), collects, uses, stores, and protects the personal information of individuals who access or use our services (each a "Player" or "User").

This Policy applies to all personal data collected through the Website, including data provided during account registration, during the deposit and withdrawal process, during gameplay, and through any communication you have with the 88fi support team. It covers all players accessing the platform from Bangladesh and any other jurisdiction in which our services are made available.

By creating an 88fi account, depositing funds, or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, you must not use the 88fi platform.

88fi collects personal information in the following categories, depending on how you interact with the platform:

2.1 Registration & Identity Data

When you create an 88fi account, we collect: your full legal name, date of birth, email address, username, and password (stored in hashed form). We may also collect a copy of a government-issued identity document (e.g., National Identity Card, passport, or birth certificate) when identity or age verification is required.

2.2 Financial & Payment Data

To process deposits and withdrawals in Bangladeshi Taka (BDT), we collect: the mobile number or account identifier associated with your bKash, Nagad, Rocket, or Upay payment account. We do not store full card numbers or mobile banking PINs. Payment authentication is handled exclusively through the secure APIs of the respective payment providers.

2.3 Transaction & Gameplay Data

We automatically record all transactions made on your account, including deposits, withdrawals, bonus credits, wager amounts, game outcomes, and account balance changes. We also log gameplay activity such as game titles played, session durations, bet sizes, and the time and date of each session.

2.4 Technical & Device Data

When you access the Website, our servers automatically collect certain technical information, including: your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session timestamps. This information is used for security monitoring, fraud prevention, and platform optimisation.

2.5 Communications Data

If you contact the 88fi support team via email, we retain a record of that correspondence, including the content of your messages and the email address from which they were sent. This helps us resolve disputes, track support history, and improve our service quality.

2.6 Responsible Gaming Data

If you use 88fi's responsible gaming tools — such as setting deposit limits, requesting a cooling-off period, or applying for self-exclusion — we record the parameters and dates of those elections. This data is treated with particular sensitivity and is accessible only to authorised staff for the purpose of enforcing those restrictions.

88fi uses the personal data it collects for the following purposes:

• Account Management: To create, maintain, and secure your 88fi account, including enforcing the one-account-per-player rule and processing account closure requests.
• Service Delivery: To allow you to access the full range of games and betting markets available on the platform, including live casino tables, slots, sports betting, and specialty games.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, and Upay in Bangladeshi Taka, and to maintain accurate transaction records.
• Identity & Age Verification: To confirm that you are at least 21 years of age and to meet our Know Your Customer (KYC) obligations, preventing underage gambling and fraudulent account activity.
• Fraud Prevention & Security: To detect and investigate suspicious activity, including duplicate accounts, money laundering, and unauthorised access attempts, using transaction pattern analysis and device fingerprinting.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling behaviour and to enforce any responsible gaming restrictions you have voluntarily applied to your account.
• Customer Support: To respond to your enquiries, process complaints, and maintain a support history for quality assurance purposes.
• Legal & Regulatory Compliance: To fulfil any obligations imposed by applicable law, including responding to lawful requests from competent authorities.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the performance, reliability, and user experience of the 88fi platform.
• Marketing Communications (with consent only): To send you promotional offers, bonus notifications, and updates about new games or features, where you have expressly opted in to receive such communications. You may withdraw this consent at any time.

88fi processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing that is necessary to perform the contract between you and 88fi — i.e., to deliver the gaming and betting services you have signed up for, including account management, gameplay, and payment processing.
• Legal Obligation: Processing required to comply with applicable legal requirements, including age verification, anti-money-laundering checks, and responding to lawful authority requests.
• Legitimate Interests: Processing carried out for 88fi's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and service analytics — where those interests are not overridden by your fundamental rights.
• Consent: Where 88fi relies on your consent as the legal basis — specifically for marketing communications — you retain the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

88fi uses cookies and similar tracking technologies on the Website to enhance your experience, maintain session security, and gather aggregated analytics data. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These are essential for the Website to function. They enable core features such as session authentication, account security, and load balancing. These cookies cannot be disabled without severely impairing your ability to use the platform.
• Functional Cookies: These remember your preferences — such as language settings, preferred payment method, and responsible gaming limits — so you do not need to re-enter them on every visit.
• Analytics Cookies: These collect anonymised information about how visitors interact with the Website, including which pages are visited most frequently and where users experience errors. This data helps 88fi improve the platform. No individually identifiable data is included in analytics reports.
• Security Cookies: These help 88fi detect and prevent fraudulent activity, including account takeover attempts and automated bot access. They record device characteristics and behavioural signals that are evaluated by our fraud-prevention systems.

88fi does not use third-party advertising cookies or place tracking pixels on behalf of external advertisers. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent you from logging in to your account.

88fi does not sell, rent, or trade your personal information to any third party for commercial purposes. We may share your data only in the following limited circumstances:

• Payment Providers: We share the minimum necessary payment data with bKash, Nagad, Rocket, and Upay to facilitate deposit and withdrawal transactions. Each provider processes this data under its own privacy policy and security standards.
• Game Providers: We share a session token or anonymised player identifier with third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) to authenticate your access to their games. Full account details are not transmitted.
• Fraud & Security Partners: We may share device and behavioural data with specialist fraud-prevention service providers who assist us in detecting and preventing account takeover, bonus abuse, and financial crime. These providers act as data processors under contract with 88fi.
• Legal & Regulatory Authorities: We will disclose personal data to law enforcement agencies, regulators, or courts where we are required to do so by applicable law, by court order, or where we reasonably believe disclosure is necessary to prevent serious harm.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of 88fi's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer in advance via email.

88fi retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply:

After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to any identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical analysis purposes.

88fi takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• TLS/SSL Encryption: All data in transit between your browser or device and the 88fi platform is encrypted using current-generation TLS protocols, preventing interception by third parties.
• Password Hashing: User passwords are stored using a strong one-way cryptographic hashing algorithm. Plain-text passwords are never stored or accessible to any member of the 88fi team.
• Access Controls: Access to personal data is restricted to authorised 88fi personnel on a strict need-to-know basis. Staff with access to sensitive data are subject to confidentiality obligations and regular security training.
• Intrusion Detection: 88fi's infrastructure is monitored continuously for anomalous activity. Automated alerts and manual review processes are in place to detect and respond to potential security incidents promptly.
• Secure Payment APIs: Financial transaction data is processed exclusively through the encrypted APIs of bKash, Nagad, Rocket, and Upay. 88fi does not retain mobile banking PINs or full payment credentials on its own servers.
• Regular Security Reviews: The platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.

As a player on the 88fi platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and include your registered username.

• Right of Access: You may request a copy of all personal data 88fi holds about you. We will provide this in a structured, commonly used format within 30 days of receiving your request.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected. Where a correction affects a past transaction record, we will note the amendment without altering the original record.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. This right is subject to our legal retention obligations — for example, financial transaction records required by anti-money-laundering law cannot be erased on request.
• Right to Restrict Processing: In certain circumstances — such as while a data accuracy dispute is being resolved — you may request that we restrict the processing of your personal data to storage only.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request a machine-readable copy of your personal data so that it can be transferred to another service provider.
• Right to Withdraw Consent: Where 88fi processes your data on the basis of consent (specifically for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to the withdrawal.
• Right to Object: You may object to processing carried out on the basis of legitimate interests. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

The 88fi platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from any individual under the age of 21. If we become aware that an account has been created by or is being used by a person under the age of 21, we will suspend that account immediately and delete all associated personal data that is not required to be retained for legal or compliance purposes.

If you are a parent or guardian and believe that a minor in your care has created an 88fi account, please contact us immediately at [email protected] with the subject line "Minor Account Report". We will investigate and act on all such reports as a priority.

The 88fi Website may contain references to third-party services, including game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, and payment providers such as bKash, Nagad, Rocket, and Upay. When you interact with any game or payment interface powered by a third party, that interaction is governed by the third party's own privacy policy, not by this document.

88fi has no control over the data practices of third-party service providers beyond the contractual obligations we impose on them as data processors. We encourage you to review the privacy policies of any third-party service you interact with through the platform.

The 88fi Website does not contain links to external websites unrelated to the delivery of our services. If you ever encounter a link on the Website that directs you to an unrelated external site, please report it to [email protected] immediately.

88fi reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. When material changes are made, registered players will be notified via email to the address held on their account at least 7 days before the updated policy takes effect.

The effective date at the top of this document will always reflect the date on which the current version came into force. We recommend reviewing this Privacy Policy periodically to stay informed about how we protect your personal data.

Your continued use of the 88fi platform after the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised policy, you must stop using the platform and contact [email protected] to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data 88fi holds about you, please contact us using the details below. All data-related correspondence must be submitted in English.

• Email (plain text): [email protected]
• Subject line for data requests: "Data Rights Request" or "Privacy Enquiry"
• Support hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)

When submitting a data rights request, please include your registered username and a clear description of your request to help us locate your records and respond efficiently. We may ask you to verify your identity before processing certain types of requests, such as access or erasure requests, to protect against unauthorised third-party access to your data.