w88fb Privacy Policy – How We Protect Your Personal Data

1 Introduction

This Privacy Policy (hereinafter "the Policy") is issued by w88fb (hereinafter "w88fb", "the Company", "We", or "Us"), the operator of the online casino and sports betting platform located at https://w88fb.io (hereinafter "the Platform"). This Policy describes in full how w88fb collects, receives, uses, stores, shares, transfers, and protects personal data belonging to individuals who visit or register on the Platform (hereinafter "Players", "Users", or "You").

By accessing, registering on, or using any part of the w88fb Platform, you acknowledge that you have read and understood this Policy in its entirety and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you must not use the Platform.

w88fb is committed to processing personal data lawfully, fairly, and transparently. We apply the principle of data minimisation — collecting only what is genuinely necessary — and we take appropriate technical and organisational measures to protect the data we hold against unauthorised access, loss, or destruction.

2 Personal Data We Collect

w88fb collects personal data in several distinct categories depending on the nature of your interaction with the Platform:

2.1 Registration Data. When you create an account, we collect your full legal name, date of birth, residential address, email address, and chosen username. This data is required to open and administer your account and to comply with our Know Your Customer (KYC) obligations.

2.2 Identity Verification Data. In order to verify your identity and age (players must be 21 or older), we may request copies of government-issued identity documents such as your National Identification Card (NID), passport, or driving licence, together with proof of address such as a recent utility bill or bank statement. These documents are processed by our KYC team and retained in accordance with Section 8 below.

2.3 Financial Data. We collect transaction records including deposit amounts, withdrawal requests, BDT balances, and the mobile financial service numbers or bank account details associated with transactions processed via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank. We do not store full card or mobile banking PINs.

2.4 Gaming Activity Data. We collect data relating to your use of games on the Platform, including bet history, game session logs, winnings, and any bonus or promotional credit usage. This data is used for account administration, fraud prevention, responsible gaming monitoring, and dispute resolution.

2.5 Communications Data. If you contact our support team via live chat, email, or any other channel, we retain records of those communications, including the content of messages, timestamps, and the channel used. This data is used to resolve disputes and to improve our support services.

2.6 Technical and Device Data. When you access the Platform, we automatically collect technical data including your IP address, browser type and version, operating system, device identifiers, screen resolution, and referring URL. This data is used for security monitoring, fraud detection, and platform performance optimisation.

3 How We Collect Your Data

w88fb collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide directly when registering, completing KYC verification, making a deposit or withdrawal, contacting support, or completing any form on the Platform.
• Automated collection: Data collected automatically through cookies, web beacons, session tracking scripts, and server logs when you browse or use the Platform. See Section 7 for details of our Cookie Policy.
• Third-party payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and partner banks when processing deposits and withdrawals. w88fb receives only the data necessary to reconcile transactions — we do not receive your full mobile banking credentials.
• Identity verification services: Data received from regulated third-party KYC and identity verification service providers in the course of verifying your identity documents.
• Fraud prevention and security services: Risk and fraud signals received from third-party security providers used to detect and prevent fraudulent account activity.

4 How We Use Your Personal Data

w88fb uses your personal data strictly for the purposes set out below. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected without first obtaining your explicit consent.

• Account creation and administration: To open, maintain, and administer your w88fb account, including processing login requests, applying account settings, and managing responsible gaming controls.
• Identity and age verification: To confirm that you are aged 21 or above and that the information you have provided at registration is accurate, in accordance with our KYC obligations.
• Payment processing: To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and Bangladeshi bank transfer partners, and to maintain accurate financial records of all transactions.
• Responsible gaming compliance: To monitor gaming activity for signs of problem gambling behaviour, to enforce deposit limits and self-exclusion settings, and to provide intervention where required.
• Customer support: To investigate and resolve support requests, complaints, and disputes submitted through live chat, email, or any other support channel.
• Fraud and security monitoring: To detect and prevent fraudulent activity, money laundering, account takeover attempts, and any other conduct that breaches our Terms & Conditions or applicable law.
• Legal compliance: To comply with applicable legal obligations including anti-money laundering (AML) requirements, international gaming licence conditions, and lawful requests from competent authorities.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the performance, security, and usability of the w88fb Platform.
• Marketing communications (with consent): To send you promotional offers, bonus notifications, and news about w88fb — only where you have expressly opted in to receive such communications. You may withdraw consent at any time by updating your account communication preferences.

5 Legal Basis for Processing Personal Data

w88fb processes personal data on the following legal bases, each of which applies to the corresponding category of processing activity described in this Policy:

• Contractual necessity: Processing required to fulfil our contractual obligations to you under the w88fb Terms & Conditions — including account administration, payment processing, and game provision — is carried out on the basis that it is necessary for the performance of a contract to which you are a party.
• Legal obligation: Processing required to comply with applicable legal obligations — including KYC identity verification, AML transaction monitoring, and responding to lawful regulatory requests — is carried out on the basis of legal obligation.
• Legitimate interests: Processing carried out to detect and prevent fraud, protect the security of the Platform, and improve our services is conducted on the basis of w88fb's legitimate interests in maintaining a safe and reliable platform, where those interests are not overridden by your data protection rights.
• Consent: Where processing is based on consent — specifically in respect of direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

6 Data Sharing & Third Parties

6.1 No Commercial Data Sales. w88fb does not sell, rent, or otherwise commercially transfer your personal data to any third party for their own marketing or advertising purposes under any circumstances.

6.2 Authorised Third-Party Processors. w88fb shares personal data with third-party service providers only where necessary to operate the Platform, and only under contracts that require those providers to process data solely on w88fb's instructions and to maintain appropriate data security standards. These processors include:

• Mobile financial service providers (bKash, Nagad, Rocket, Upay) and banking partners, for the purpose of processing BDT deposits and withdrawals.
• Identity verification and KYC service providers, for the purpose of confirming player identity and age.
• Fraud prevention and security intelligence providers, for the purpose of detecting and preventing fraudulent activity.
• Game content providers including Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, and Microgaming, to the extent that technical game session data is transmitted to their servers to operate games on the Platform.
• Cloud infrastructure and hosting providers used to operate Platform servers, databases, and content delivery networks.

6.3 Legal Disclosures. w88fb may disclose personal data to competent law enforcement authorities, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, court order, or in the context of a lawful investigation. In such cases, w88fb will disclose only the minimum data required to satisfy the legal obligation.

7 Cookies & Tracking Technologies

w88fb uses cookies and similar tracking technologies on the Platform to deliver a functional, personalised, and secure user experience. By continuing to use the Platform, you consent to the use of cookies in accordance with this section.

7.1 Essential Cookies. These cookies are strictly necessary for the Platform to function correctly. They manage your login session, maintain your account authentication state, and remember your language and currency preferences. The Platform cannot function properly without these cookies, and they cannot be disabled.

7.2 Analytics Cookies. We use analytics cookies to collect aggregated, anonymised data about how players navigate and use the Platform. This data helps us identify pages or features that may need improvement and to optimise the overall user experience. No personally identifiable data is included in analytics reports.

7.3 Security Cookies. Security cookies help us detect and prevent fraudulent activity, bot traffic, and account takeover attempts by recording technical session signatures and comparing them against known risk indicators.

7.4 Managing Cookies. You may manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies will prevent core Platform functions — including login and the cashier — from operating correctly. Disabling analytics or security cookies will not affect basic Platform functionality but may reduce the quality of our fraud detection and personalisation capabilities.

8 Data Retention

w88fb retains personal data only for as long as is necessary for the purposes for which it was collected, subject to any longer retention period required by applicable law or our international gaming licence obligations.

• Account data: Retained for the full duration of your account's active life, plus a period of five (5) years following account closure, to satisfy legal, regulatory, and audit requirements.
• KYC identity documents: Retained for a period of five (5) years from the date of submission or from the date of account closure, whichever is later, in accordance with anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum period of five (5) years from the date of each transaction to satisfy financial record-keeping and AML compliance obligations.
• Gaming activity logs: Retained for a period of three (3) years from the date of each session, or longer where a dispute or investigation is open relating to those sessions.
• Support communications: Retained for a period of two (2) years from the date of the final communication in each support case.
• Marketing consent records: Retained for as long as you have an active account or until you withdraw consent, plus one (1) year thereafter as an audit record.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual.

9 Data Security

w88fb implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS 1.3 encryption for all data transmitted between your device and Platform servers.
• One-way hashing of all passwords and authentication credentials — no w88fb employee can view your password in plain text.
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis, with full audit logging of all access events.
• Regular independent security audits and penetration testing of Platform infrastructure.
• Firewalls, intrusion detection systems, and real-time threat monitoring to protect Platform servers.
• Encrypted storage of all identity documents submitted during KYC verification.
• Automated anomaly detection systems that flag and investigate unusual account activity as a potential indicator of fraud or unauthorised access.

In the event of a personal data breach that poses a risk to affected players, w88fb will take immediate steps to contain the breach, investigate its cause, and notify affected players within 72 hours of becoming aware of the incident, together with guidance on any protective steps they should take.

10 Your Data Rights

As a player whose personal data is processed by w88fb, you have the following rights with respect to that data. All requests should be submitted in writing to [email protected] and will be acknowledged within 48 hours:

• Right of access: You have the right to request a full copy of the personal data w88fb holds about you, together with information about how that data is used and with whom it is shared.
• Right to rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. You may update some data directly through your account settings; other corrections require a formal request to our support team.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to applicable legal retention obligations that may require us to retain certain data for a defined period after account closure.
• Right to restriction: You have the right to request that processing of your personal data be restricted in certain circumstances, such as where you contest the accuracy of the data or where the processing is unlawful but you prefer restriction over deletion.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to w88fb in a structured, commonly used, machine-readable format, and to request that this data be transferred directly to another controller where technically feasible.
• Right to object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling. Where you object to direct marketing processing, we will cease that processing immediately without requiring you to state a reason.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before the withdrawal.

w88fb will respond to all data rights requests within thirty (30) calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.

11 Children's Privacy & Age Restriction

The w88fb Platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21 years of age, you must not register on, access, or use the Platform under any circumstances.

If w88fb becomes aware that personal data has been collected from an individual who is under 21 years of age, we will immediately suspend the relevant account, delete all personal data associated with it, and — where applicable — report the matter to relevant authorities in accordance with our legal obligations.

If you are a parent or guardian and you believe that a minor under your care has registered on or used the w88fb Platform, please contact us immediately at [email protected] so that we can take appropriate action without delay.

12 International Data Transfers

The w88fb Platform is operated under an international gaming licence, and some of the third-party service providers described in Section 6 — including game providers, cloud infrastructure providers, and KYC verification services — may process personal data on servers located outside Bangladesh. Where personal data is transferred to a third country, w88fb takes appropriate safeguards to ensure that the data receives a level of protection equivalent to that which applies within Bangladesh, including the use of contractual data protection clauses with all third-party processors.

By registering on and using the w88fb Platform, you acknowledge and consent to the transfer, storage, and processing of your personal data in accordance with this Policy, including transfers to countries outside Bangladesh where our service providers operate.

13 Changes to This Privacy Policy

w88fb reserves the right to amend, update, or replace this Privacy Policy at any time in order to reflect changes to applicable law, regulatory guidance, our data processing practices, or the services offered on the Platform. Where amendments are material — meaning they affect your rights or the way your data is used in a significant way — w88fb will provide at least seven (7) days' advance notice before the updated Policy takes effect. Notice will be provided through a prominent notification displayed on the Platform and, where possible, via email to the address registered on your account.

Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the Platform and submit an account closure request before the effective date of the changes.

The version number and effective date displayed at the top of this Policy will be updated each time a new version is published. We recommend reviewing this Policy periodically to stay informed about how w88fb protects your data.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data w88fb holds about you, please contact our Data Protection team using the details below. All correspondence should be submitted in English:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 from within your account dashboard — select "Privacy & Data" as the enquiry category.
• Response Time: Data rights requests are acknowledged within 48 hours and resolved within 30 calendar days. General privacy enquiries are answered within 24 hours during peak support hours (9 AM – 11 PM BST, UTC+6).

When submitting a data rights request, please include your registered email address and account username so that we can locate your records promptly and verify your identity before processing the request.