ff8b Privacy Policy — How We Protect Your Data

ff8b operates the online betting and casino platform accessible at ff8b.io (the "Platform"). Throughout this Privacy Policy, references to "ff8b", "we", "us", or "our" refer to the operator of the Platform. References to "you" or "your" refer to any individual who accesses, registers on, or interacts with the Platform in any capacity.

ff8b is the data controller for personal data collected through the Platform. This means we are the entity that determines the purposes for which your personal data is processed and the means by which that processing is carried out. We take our responsibilities as data controller seriously and are committed to handling your information in a lawful, fair, and transparent manner.

For any questions regarding this Privacy Policy or the way we handle your data, please contact our Data Privacy team at [email protected]. Our support team is available 24 hours a day, 7 days a week, including all Bangladeshi public holidays.

We collect personal data through several channels: directly from you when you register or use the Platform, automatically through technical systems as you interact with our services, and occasionally from third-party verification providers. The categories of data we collect are set out below.

ff8b uses the personal data we collect for the following documented purposes. We do not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your explicit consent.

• Account creation and management: To register your account, verify your identity, and maintain your player profile on the Platform.
• Service delivery: To process your bets, calculate and credit winnings, manage your account balance, and provide access to all Platform features including casino games, live dealer tables, and sports betting markets.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to reconcile transaction records.
• Identity and age verification: To confirm that you meet the 21-plus minimum age requirement and to verify that your identity documents are genuine, in compliance with our responsible gaming obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, multi-accounting, bonus abuse, money laundering, and other prohibited activities.
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance through our live chat and email support channels.
• Legal compliance: To comply with applicable anti-money laundering (AML) regulations, data retention requirements, and any lawful requests from competent authorities.
• Platform improvement: To analyse aggregated, anonymised usage data to understand how players interact with the Platform and to guide improvements to our products and user experience.
• Responsible gaming monitoring: To identify behavioural patterns that may indicate problem gambling, in accordance with our Responsible Gaming Policy, and to apply player protection measures where appropriate.
• Direct communications: To send you important account notifications, security alerts, and — where you have opted in — promotional communications about bonuses and new products. You may opt out of marketing communications at any time.

ff8b processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: The majority of our data processing is necessary to perform our contract with you — i.e., to deliver the betting and gaming services you have registered for. Without processing your identity data, contact data, and financial data, we cannot operate your account or process transactions.
• Legal obligation: Certain processing activities — particularly identity verification, age verification, transaction record-keeping, and AML monitoring — are required by law. We process this data to comply with applicable legal requirements, not merely because it is convenient for us to do so.
• Legitimate interests: We process technical data and usage analytics on the basis of our legitimate interest in maintaining platform security, detecting fraud, and improving our services. We conduct a balancing assessment to confirm that our legitimate interests are not overridden by your privacy rights before relying on this basis.
• Consent: Where we send you optional marketing communications about promotions, bonuses, or new products, we do so only on the basis of your explicit opt-in consent. You may withdraw this consent at any time by updating your communication preferences in your account settings or by emailing [email protected].

ff8b does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment service providers: We share necessary transaction data (name, mobile number, transaction amount) with bKash, Nagad, Rocket, Upay, and our card processing partners to facilitate deposits and withdrawals. These providers are contractually bound to process your data only for the purpose of executing the relevant payment transaction.
• Identity verification providers: We may use third-party KYC (Know Your Customer) verification services to assist in confirming the authenticity of identity documents. These providers receive only the minimum data required to perform the verification check.
• Game software providers: When you play casino or slot games, certain technical identifiers (such as a session token and anonymous player ID) are shared with the relevant game studio (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi) to facilitate gameplay. Your full personal details are not shared with game studios.
• IT infrastructure and hosting providers: We use third-party cloud infrastructure and hosting services to operate the Platform. These providers have access to data stored on our servers only as part of their technical service delivery and are prohibited from using the data for any other purpose.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where we are required to do so by law, court order, or to protect the legal rights of ff8b or its players.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of ff8b's business, player data may be transferred to the acquiring entity. You will be notified of any such transfer and the applicable privacy terms before any transfer occurs.

The ff8b Platform uses cookies and similar technologies (such as local storage and session tokens) to ensure the Platform functions correctly and to provide a secure, personalised experience. Below is a summary of the cookie categories we use.

ff8b does not use advertising cookies, retargeting pixels, or any cross-site tracking technology that monitors your browsing activity outside of the ff8b.io domain. You can manage your cookie preferences by adjusting settings in your browser. Blocking strictly necessary cookies will impair Platform functionality.

ff8b retains personal data for as long as is necessary to fulfil the purpose for which it was collected, and for as long as required by applicable law. The following indicative retention periods apply:

• Account and identity data: Retained for the lifetime of your account and for a minimum of 5 years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction and betting records: Retained for a minimum of 5 years from the date of the transaction, as required by financial record-keeping obligations.
• Customer support communications: Retained for 3 years from the date of the communication, to enable dispute resolution and service quality review.
• Technical and usage data (server logs): Retained for 12 months in rolling logs for security monitoring purposes, after which they are anonymised or deleted.
• Marketing consent records: Retained for as long as your account is active, or until you withdraw consent, whichever is earlier.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. ff8b does not retain data beyond the periods described above unless compelled to do so by a specific legal obligation or ongoing legal proceeding.

ff8b implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport layer security: All data in transit is encrypted using TLS 1.2 or higher with 256-bit cipher suites. HTTPS is enforced across all Platform endpoints.
• Encryption at rest: Sensitive data stored on our servers — including identity documents, NID details, and financial records — is encrypted at rest using AES-256 encryption.
• Access controls: Internal access to personal data is restricted to authorised ff8b personnel on a documented need-to-know basis. All internal access events are logged and subject to periodic audit.
• Penetration testing: The Platform undergoes regular security assessments, including vulnerability scanning and penetration testing conducted by independent security professionals.
• Incident response: ff8b maintains a documented data breach response plan. In the event of a security incident that is likely to result in risk to player data, we will notify affected players and take remedial action within the timeframes required by applicable law.

As an ff8b player, you have the following rights with respect to your personal data. These rights are available to all registered players regardless of the device or method used to access the Platform.

• Right of access: You may request a copy of all personal data that ff8b holds about you. We will provide this in a structured, commonly used format within 30 days of a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information directly from your account settings page; for identity document corrections, please contact support.
• Right to erasure: In certain circumstances — for example, where your account has been closed and the applicable retention period has elapsed — you may request that we delete your personal data. Note that this right is subject to exceptions where we are required to retain data by law (e.g., AML record-keeping obligations).
• Right to restriction: You may request that we restrict the processing of your data — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: You may request your data in a machine-readable format suitable for transfer to another service provider.
• Right to object: You may object to data processing carried out on the basis of our legitimate interests. We will assess your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact our support team via live chat at ff8b.io or by email at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 3 business days and provide a full response within 30 calendar days.

The ff8b Platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from any individual under the age of 21. Our registration process includes age declaration and identity verification steps specifically designed to prevent underage access.

If ff8b discovers or is informed that personal data has been collected from a person under the age of 21, we will immediately close the associated account, void any transactions, and securely delete all personal data associated with the account. If you have reason to believe that a minor has registered on the Platform, please report this to us immediately at [email protected].

The ff8b Platform may contain references to third-party services — for example, payment processors such as bKash and Nagad, or game studios such as Pragmatic Play and Evolution Gaming. When you interact with these third-party services, you are subject to the privacy policies of those providers, not this Privacy Policy.

ff8b is not responsible for the privacy practices or the content of third-party platforms. We recommend that you review the privacy policies of any third-party service you use in connection with your ff8b account, particularly the privacy policies published by bKash, Nagad, Rocket, and Upay regarding their handling of mobile wallet transaction data.

ff8b does not control the data practices of third-party game providers once a game session has been initiated. Game providers receive only the session-level data necessary to deliver the game and are contractually prohibited from using that data for purposes outside the scope of game delivery.

ff8b may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When we make material changes to this policy, we will notify registered players via the Platform's notification system and/or by email to the address on your account, with at least 7 days' notice before the changes take effect.

The effective date displayed at the top of this document will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised policy.

If you disagree with any updated terms, you have the right to close your account and withdraw your remaining balance before the updated policy takes effect. To close your account, please contact support via live chat or email at [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ff8b handles your personal data, please contact us through one of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within the Platform at ff8b.io
• Email: [email protected] — please use the subject line "Privacy Enquiry" for data-related requests

Our support team operates in English and is available every day of the year, including Eid, Pohela Boishakh, Victory Day (December 16), Independence Day (March 26), and all other Bangladeshi public holidays. We aim to acknowledge all privacy-related enquiries within 3 business days and to provide a full response within 30 calendar days.