ff888 Privacy Policy

This Privacy Policy applies to all users of the ff888 platform, accessible at ff888.im, including all associated mobile interfaces, game pages, and account management areas. It governs the collection, storage, processing, and disclosure of personal data by ff888 in connection with the services we provide to registered players in Bangladesh and elsewhere.

By creating an ff888 account or continuing to use the ff888 platform after this policy has been published or updated, you acknowledge that you have read and understood the terms set out in this Privacy Policy. If you do not agree with any part of this policy, you must cease using the ff888 platform and may request closure of your account by contacting [email protected].

Throughout this document, "we", "us", and "ff888" refer to the operator of the ff888 platform. "You" and "player" refer to any individual who accesses the ff888 platform, whether as a registered account holder or as a visitor browsing without an account. "Personal data" means any information that identifies or could reasonably be used to identify a living individual.

This policy should be read in conjunction with the ff888 Terms and Conditions, which are incorporated by reference. Where a conflict exists between this Privacy Policy and the Terms and Conditions on a privacy-related matter, this Privacy Policy shall prevail.

ff888 collects personal data in several categories depending on the nature of your interaction with the platform. The following table summarises the primary categories of data we collect and typical examples within each category:

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health information, or biometric data unless specifically required by applicable law and with your explicit consent.

ff888 collects personal data through several distinct channels. Understanding how your data reaches us helps you make informed decisions about your privacy on the platform.

• Direct collection during registration: When you create an ff888 account, you provide identity data, contact data, and account credentials directly via the registration form. This data is submitted voluntarily as part of the account creation process.
• KYC document submission: When we request identity verification, you submit documentary evidence via our secure upload portal. These documents are reviewed by our compliance team and stored in an encrypted document vault.
• Payment transactions: When you deposit or withdraw funds using bKash, Nagad, Rocket, Upay, SureCash, Visa, or Mastercard, financial transaction data is generated and shared with ff888 by the relevant payment provider as confirmation of the transaction.
• Platform activity: All activity on the ff888 platform — including game sessions, bet placements, navigation patterns, and account changes — is logged automatically by our platform infrastructure. This data is used for security, fraud detection, and responsible gaming monitoring.
• Cookies and tracking technologies: ff888 uses cookies and similar technologies on its platform to recognise returning users, maintain session state, and analyse aggregate usage patterns. See Section 7 for a full breakdown of our cookie practices.
• Customer support interactions: When you contact ff888 support via live chat or email, the content of those communications is recorded and stored as part of your account record for quality assurance and dispute resolution purposes.
• Third-party sources: In limited circumstances, ff888 may receive data about you from third-party sources, including fraud prevention databases and identity verification service providers, for the purpose of confirming the accuracy of the information you have provided.

ff888 processes personal data only for specific, legitimate purposes. We do not use your data for any purpose that is incompatible with the purposes stated at the time of collection. The primary purposes for which we process personal data are as follows:

• Account management: Creating and maintaining your ff888 player account, authenticating your identity at login, managing account preferences, and processing account closure requests.
• Identity and age verification: Conducting Know Your Customer (KYC) checks to confirm your identity, verify that you are aged 21 or above, and comply with anti-money laundering obligations.
• Payment processing: Facilitating deposits and withdrawals in Bangladeshi Taka via bKash, Nagad, Rocket, Upay, SureCash, and card payment channels, and maintaining records of all financial transactions for accounting and compliance purposes.
• Service delivery: Operating the ff888 gaming platform including cricket betting, live casino, slots, Callbreak, Panda Dragon Boat, and all other products, and ensuring that game outcomes, bet settlements, and bonus calculations are correctly applied to your account.
• Fraud prevention and security: Monitoring account activity to detect and prevent fraud, account takeover, money laundering, bonus abuse, and other prohibited activities. This includes automated risk-scoring of account behaviour patterns.
• Responsible gaming monitoring: Monitoring gaming behaviour to identify patterns that may indicate problem gambling, applying any responsible gaming limits or exclusions you have requested, and proactively reaching out where our systems flag a potential concern.
• Customer support: Responding to queries, resolving disputes, and providing technical assistance via live chat and email.
• Legal and regulatory compliance: Retaining records as required by applicable law, responding to lawful requests from regulatory or law enforcement authorities, and fulfilling our obligations under anti-money laundering legislation.
• Platform improvement: Analysing aggregated, anonymised usage data to improve platform performance, user experience, and game selection — without identifying individual players.

ff888 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to perform the contract between you and ff888 — including account creation, payment processing, game operation, and customer support — is carried out on the basis of contractual necessity. Without this processing, ff888 cannot provide its services to you.
• Legal obligation: Processing that is required to comply with applicable law — including anti-money laundering record-keeping, identity verification obligations, and responses to lawful authority requests — is carried out on the basis of legal obligation. This processing cannot be opted out of; it is a prerequisite for maintaining an ff888 account.
• Legitimate interests: Processing for fraud detection, security monitoring, responsible gaming surveillance, platform analytics, and dispute resolution is carried out on the basis of ff888's legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms. ff888 has assessed this balance and determined that the processing is proportionate and necessary.
• Consent: Where ff888 processes data for a purpose not covered by the above bases — such as sending you optional promotional communications — we will obtain your explicit consent before doing so. You may withdraw consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

ff888 does not sell, rent, or trade your personal data to third parties. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose:

• Payment service providers: We share necessary transaction data with bKash, Nagad, Rocket, Upay, SureCash, and card payment processors to facilitate deposits and withdrawals. These providers process data only for payment execution purposes and are subject to their own privacy and data security obligations.
• Identity verification providers: We may share identity documents and personal data with third-party KYC and age verification service providers for the purpose of confirming your identity and age. These providers are contractually bound to handle your data securely and to use it only for verification purposes.
• Game providers: Game round data — including bet amounts, selections, and outcomes — is shared with the relevant game provider (such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, or Spribe) to enable the operation of their games on the ff888 platform. Game providers do not receive your full identity data; they receive only the session and game-round data necessary to operate their product.
• Fraud prevention and security services: ff888 may share data with fraud prevention databases and cybersecurity service providers to protect the platform and its users from fraudulent activity. Access to such services is governed by data processing agreements.
• Legal and regulatory authorities: ff888 will disclose personal data to regulatory bodies, law enforcement agencies, or courts when required to do so by applicable law or valid legal process. ff888 will notify you of such a disclosure where it is legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or a substantial portion of ff888's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data following the transfer.

All third parties with whom ff888 shares personal data are required to maintain appropriate technical and organisational security measures and to process your data only for the purposes specified in the relevant data processing agreement.

ff888 uses cookies and similar technologies to operate and improve the platform. A cookie is a small text file placed on your device by the ff888 platform when you visit. Cookies allow ff888 to recognise your device on subsequent visits, maintain your login session, and understand how the platform is being used.

ff888 does not use advertising cookies or third-party tracking pixels for ad targeting. Strictly necessary cookies cannot be disabled as they are essential to the operation of the platform. Functional and analytical cookies may be managed through your browser settings; however, disabling functional cookies may affect your experience on the platform.

ff888 does not use session replay or keystroke-logging technologies. All cookie data is stored in encrypted form and is not shared with advertising networks.

ff888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law. The following retention periods apply to the main categories of data held by ff888:

• Account and identity data: Retained for the duration of your active account plus a minimum of five years following account closure, in line with anti-money laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of seven years from the date of the transaction to satisfy financial record-keeping requirements.
• KYC verification documents: Retained for five years from the date of submission or from the date of account closure, whichever is later.
• Gaming activity records: Retained for five years from the date of the relevant session or bet settlement.
• Customer support communications: Retained for three years from the date of the last communication in each support thread.
• Technical and session data (logs): Retained for 12 months in standard operational logs; security incident logs may be retained for up to three years.
• Anonymised analytics data: Retained indefinitely in anonymised, aggregated form that cannot be used to identify individual players.

On expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is technically complex due to backup systems, data is rendered inaccessible pending scheduled deletion in the next backup purge cycle.

ff888 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. The key security measures in place include:

• 256-bit SSL/TLS encryption: All data in transit between your device and the ff888 platform is encrypted using 256-bit SSL/TLS. This applies to account login, payment transactions, document uploads, and all API communications.
• Encryption at rest: Sensitive personal data stored in ff888 databases — including identity data, financial records, and KYC documents — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data held by ff888 is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and undergo security awareness training.
• Password security: Account passwords are stored as salted cryptographic hashes. ff888 staff cannot view your password in plain text under any circumstances.
• Fraud monitoring: Continuous automated monitoring of platform activity identifies suspicious patterns in real time. Potential security incidents trigger immediate review by the ff888 security team.
• Penetration testing: ff888's platform infrastructure is subject to regular penetration testing and security audits conducted by qualified independent security professionals.
• Incident response: In the event of a personal data breach that is likely to affect your rights and freedoms, ff888 will notify you without undue delay, providing details of the nature of the breach, the categories of data affected, and the remedial steps taken.

While ff888 employs robust security measures, no digital platform can guarantee absolute security. You play an important role in protecting your own account by using a strong, unique password, not sharing your credentials with third parties, and contacting [email protected] immediately if you suspect unauthorised access to your account.

As an ff888 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request" and your registered username. ff888 will respond within 30 days of receiving a valid request.

• Right of access: You have the right to request a copy of all personal data ff888 holds about you. We will provide this in a structured, commonly used, machine-readable format.
• Right to rectification: If any personal data ff888 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to erasure ("right to be forgotten"): You may request that ff888 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to ff888's legal retention obligations.
• Right to restrict processing: You may request that ff888 temporarily cease processing your personal data — while retaining it — in certain circumstances, such as where you contest the accuracy of the data or have objected to processing pending verification of our legitimate interests.
• Right to data portability: Where processing is based on your consent or on contract, you have the right to receive your personal data in a structured, machine-readable format and to transmit it to another data controller.
• Right to object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling. ff888 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

The ff888 platform is strictly intended for adults aged 21 and above. ff888 does not knowingly collect personal data from any person under the age of 21. The registration process includes an age declaration and is subject to age verification checks.

If ff888 discovers or is notified that personal data has been collected from a person under the age of 21, the following steps will be taken without delay:

• The relevant account will be immediately suspended and flagged for investigation.
• All personal data associated with the account will be permanently deleted from ff888 systems as soon as the investigation is concluded, subject only to any legal obligation to retain evidence of the breach for compliance purposes.
• Any funds in the account will be returned to the payment source after verification that the payment method belongs to a legal guardian or responsible adult.

If you are a parent or guardian and believe that a person in your care has registered an ff888 account, please contact us immediately at [email protected]. Include the subject line "Underage Account Report" and as much detail as possible to help us locate and close the account promptly.

The ff888 platform may contain references to third-party payment providers and game providers. While ff888 takes care to work only with reputable partners, we are not responsible for the privacy practices of third-party platforms or services.

When you interact with a third-party payment service such as bKash, Nagad, or Rocket to complete a deposit or withdrawal, you are also subject to that provider's own privacy policy. ff888 encourages you to review the privacy policies of any third-party services you use in connection with your ff888 account.

ff888 does not control the data collection or processing practices of third-party game providers. Game providers receive only the session and game-round data necessary to operate their games on the ff888 platform, as described in Section 6 of this policy.

ff888 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform operations. When a material change is made, ff888 will provide advance notice to registered players via the email address on record and via a prominent notice on the platform.

The effective date of the current version of this policy is displayed at the top of this page. It is your responsibility to review this policy periodically. Continued use of the ff888 platform after an updated policy has been published and the notice period has elapsed constitutes acceptance of the revised terms.

Where a proposed change materially reduces your privacy rights, ff888 will provide a minimum of 14 days' advance notice and, where the change is based on consent, will seek fresh consent before the change takes effect in relation to your data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way ff888 handles your personal data, please contact our dedicated data privacy team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Data Rights Request — [your username]"
• Subject line for underage reports: "Underage Account Report"
• Subject line for security concerns: "Security Concern — [brief description]"
• Response time: Data rights requests are acknowledged within 5 business days and fully resolved within 30 days of receipt of a valid, verified request.
• Support availability: 24 hours a day, 7 days a week, including all Bangladeshi public holidays.

ff888 is committed to resolving all privacy-related concerns promptly and transparently. If you are not satisfied with our response to a data rights request, you may escalate the matter by requesting a formal internal review by emailing [email protected] with the subject line "Privacy Escalation".