88gf Privacy Policy — Your Data, Your Rights

88gf ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with the 88gf website at https://88gf.io and its associated services. This Privacy Policy describes how 88gf collects, processes, stores, and protects personal information in connection with the provision of its online casino, sportsbook, and related services to users in Bangladesh and across South Asia.

We understand that privacy is a fundamental right. Our data practices are designed to be transparent, proportionate, and respectful of the trust you place in 88gf when you share your personal information with us. We collect only what is necessary, retain it only for as long as required, and do not sell your data to third parties under any circumstances.

This policy should be read alongside the 88gf Terms & Conditions and the Responsible Gaming Policy, both of which are available at https://88gf.io. Together these documents form the complete agreement governing your relationship with the 88gf platform. Where any provision of this Privacy Policy conflicts with the Terms & Conditions, the Terms & Conditions shall prevail unless this policy expressly states otherwise.

88gf collects personal data through several channels: directly from you during registration and account management, automatically through your use of the platform, and from verified third-party sources where permitted by applicable law. The categories of personal data we collect are outlined in the table below.

88gf does not collect sensitive personal data beyond what is strictly required for identity verification and fraud prevention purposes. We do not request or store information relating to racial or ethnic origin, political opinions, religious beliefs, trade union membership, or health data, except in limited cases where a user discloses health-related information voluntarily through a responsible gaming self-assessment.

When you contact 88gf support via live chat, email, or WhatsApp, the content of those communications is recorded and retained for quality assurance, compliance, and dispute resolution purposes. You consent to the recording of support interactions by initiating contact with the 88gf support team.

88gf uses the personal data it collects for the following specific purposes. We process your data only where we have a lawful basis to do so, as described in Section 4 of this policy.

• Account Management: To create, verify, maintain, and administer your 88gf account, including processing deposits, withdrawals, and account balance management.
• Identity Verification (KYC): To verify your identity and age in compliance with applicable anti-money laundering (AML) and know-your-customer (KYC) obligations. This includes verifying that you are at least 21 years of age.
• Service Delivery: To provide access to sportsbook markets, casino games, promotions, live betting, and all other 88gf platform features.
• Payment Processing: To initiate, process, and confirm deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer channels.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in the Terms & Conditions.
• Responsible Gaming: To monitor betting patterns for indicators of problem gambling, to enforce limits set by the user, and to apply self-exclusion restrictions where requested.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance via live chat, email, and WhatsApp.
• Marketing & Promotions: To send you bonus offers, promotional communications, and platform updates where you have provided consent. You may withdraw consent at any time through your account settings.
• Platform Improvement: To analyse usage patterns, conduct A/B testing, and improve the 88gf interface, game selection, and overall user experience.
• Legal Compliance: To meet obligations under applicable laws including AML regulations, data retention requirements, and any lawful requests from competent authorities.

88gf processes your personal data under one or more of the following legal bases depending on the specific processing activity involved:

• Contractual Necessity: Processing that is necessary to perform the contract between you and 88gf — for example, processing your deposit to fund your betting account, or verifying your identity to enable withdrawals.
• Legal Obligation: Processing required to comply with applicable laws, including AML obligations, KYC regulations, and data retention mandates imposed by competent regulatory bodies.
• Legitimate Interests: Processing undertaken in pursuit of 88gf's legitimate business interests, such as fraud prevention, platform security, responsible gaming monitoring, and general service improvement — provided those interests are not overridden by your fundamental rights.
• Consent: Processing based on your explicit, freely given, informed consent — principally for direct marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Where 88gf relies on legitimate interests as the legal basis for processing, we conduct a balancing test to ensure that our interests do not override your rights and freedoms. If you would like more information about a specific legitimate interests assessment, contact us at [email protected].

88gf does not sell, rent, or trade your personal data to any third party. We share data only in the specific circumstances described below, and only to the minimum extent necessary for the stated purpose.

• Payment Processors: Financial data is shared with payment service providers (including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks) solely for the purpose of processing your deposit and withdrawal transactions. These providers are contractually bound to handle your data securely and may not use it for any other purpose.
• KYC & Identity Verification Partners: Identity documents and personal data submitted during the verification process are shared with accredited third-party KYC verification services for the purpose of age and identity confirmation.
• Fraud Prevention Services: Technical and identity data may be shared with fraud detection and AML screening platforms to identify and prevent prohibited activities on the 88gf platform.
• Game Software Providers: Limited technical and session data (such as account tier, bet history, and session token) may be shared with third-party game studios (including Evolution Gaming, Ezugi, Pragmatic Play, Spribe, NetEnt, Microgaming) solely to facilitate gameplay and resolve game-level disputes.
• Competent Authorities: 88gf may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or in connection with an investigation into suspected criminal activity involving the 88gf platform.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of 88gf's business assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and its implications for this Privacy Policy.

88gf retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the principal categories of data held by 88gf:

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised and aggregated data may be retained indefinitely for statistical and analytical purposes without restriction.

88gf implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following controls:

• All data transmitted between your device and the 88gf platform is encrypted using 256-bit SSL/TLS encryption, ensuring that data in transit cannot be intercepted by third parties.
• Personal data and financial records stored on 88gf servers are encrypted at rest using industry-standard encryption protocols.
• Access to personal data within 88gf's internal systems is strictly limited to authorised personnel on a need-to-know basis. All staff with access to personal data are bound by confidentiality obligations.
• 88gf employs multi-factor authentication (MFA) controls on all internal administrative systems that handle personal data.
• Regular penetration testing and vulnerability assessments are conducted on the 88gf platform by qualified security professionals.
• All third-party service providers with access to personal data are subject to contractual data security obligations and are assessed for compliance before onboarding.
• In the event of a personal data breach that poses a risk to users' rights and freedoms, 88gf will notify affected users and relevant authorities within the timeframe required by applicable law.

88gf uses cookies and similar tracking technologies (including pixels, session tokens, and local storage objects) to operate the platform, enhance your experience, and analyse platform usage. The categories of cookies used on 88gf are described below.

• Strictly Necessary Cookies: These cookies are essential to the operation of the 88gf platform. They enable core functions such as account login sessions, bet slip management, and payment flow continuity. These cookies cannot be disabled without impairing platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised information about how users interact with the 88gf platform — which pages are visited most frequently, how long sessions last, and where errors occur. This data is used to improve the platform experience and is not linked to identifiable individuals.
• Functional Cookies: These cookies remember your preferences and settings, such as your preferred language, display settings, and responsible gaming limit configurations, so you do not need to re-enter them on each visit.
• Security Cookies: These cookies support fraud detection and session security functions, including CSRF protection and suspicious login detection.

88gf does not use third-party advertising cookies or retargeting pixels. Non-essential cookies (analytics and functional) are only placed after you have acknowledged this Privacy Policy. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent you from accessing the full range of 88gf platform features.

As an 88gf user, you hold the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". 88gf will respond within 30 days of receiving a valid request.

• Right of Access: You have the right to request a copy of all personal data that 88gf holds about you, along with information about how it is processed.
• Right to Rectification: If any personal data held by 88gf is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to applicable legal retention obligations — data required for AML compliance or financial record-keeping cannot be erased before the mandatory retention period has elapsed.
• Right to Restrict Processing: You may request that 88gf restrict the processing of your personal data in certain circumstances, such as while a dispute about its accuracy is being resolved.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including direct marketing. Where you object to direct marketing, processing for that purpose will cease immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to the withdrawal.

Requests to exercise data rights are processed free of charge in the majority of cases. 88gf reserves the right to charge a reasonable administrative fee or to decline requests that are manifestly unfounded or excessive. Where a request is declined, you will be informed of the reason and your right to seek further recourse.

The 88gf platform is strictly for adults aged 21 and above. 88gf does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration process, and all accounts are subject to KYC review to confirm that the account holder meets the minimum age requirement.

If 88gf becomes aware — through its verification processes or any other means — that personal data has been collected from an individual under the age of 21, the associated account will be immediately closed, all funds will be returned to the verified payment source, and all personal data associated with the underage account will be deleted from 88gf's systems within 30 days, subject to any mandatory legal obligations that require retention for a specified period.

88gf operates primarily to serve users in Bangladesh and across South Asia. Some of the third-party service providers used by 88gf — including KYC verification partners, game software providers, and payment infrastructure vendors — may process personal data in jurisdictions outside of Bangladesh. Where such international transfers occur, 88gf ensures that appropriate safeguards are in place to protect your data, including contractual data protection clauses that impose obligations on the recipient entity consistent with the standards described in this Privacy Policy.

88gf will not transfer your personal data to any jurisdiction that does not provide an adequate level of protection for personal data without first implementing appropriate contractual or technical safeguards. If you would like more information about the international transfers that apply to your data, contact [email protected].

88gf reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the services we offer. The most current version of this policy will always be published at https://88gf.io/privacy-policy, and the "Last Updated" date at the top of this page will be revised accordingly.

Where amendments are material — meaning they significantly affect your rights or how your data is processed — 88gf will provide advance notice via email to your registered account address or via a prominent notice on the 88gf platform. For non-material amendments (such as formatting changes, clarifications, or updates to contact details), the revised policy will be published without separate notification.

Your continued use of the 88gf platform following the publication of an amended Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with an amended policy, you should discontinue use of the platform and request account closure as described in the Terms & Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 88gf, please use the contact channels listed below. All contact details are provided as plain text only and are not clickable links.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data rights requests: "Data Rights Request — [Your Account Username]"
• Live Chat: Available 24 hours a day, 7 days a week via the 88gf platform
• WhatsApp: +88 017 XXXX XXXX (available 08:00–00:00 BST)

88gf aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, the response period may be extended by a further 60 days, in which case you will be notified of the extension and its reason within the initial 30-day window.