fp88 Privacy Policy — How We Collect, Use & Protect Your Personal Data

Introduction

This Privacy Policy ("Policy") describes how fp88 ("fp88", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "the Player", "the User") who access or use the fp88 online betting and casino platform available at https://fp88.bar and any associated mobile or application interfaces (collectively, "the Platform").

By registering an fp88 account, completing the fp88 Login, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue your use of the Platform immediately.

This Policy should be read in conjunction with the fp88 Terms & Conditions, which are available at https://fp88.bar/terms-conditions and which form part of the overall agreement between you and fp88. In the event of any conflict between this Policy and the Terms & Conditions on a privacy-related matter, this Policy shall take precedence.

Who We Are

fp88 is an online sports betting and casino platform operated for players in Bangladesh and other eligible markets. For the purposes of applicable data protection law, fp88 acts as the data controller in respect of personal data collected from users of the Platform. As data controller, fp88 is responsible for determining the purposes for which and the means by which personal data is processed.

fp88 may engage third-party service providers to process personal data on fp88's behalf as data processors. All such arrangements are governed by written data processing agreements that require processors to handle your data only in accordance with fp88's documented instructions and in compliance with applicable data protection standards.

For all privacy-related enquiries, requests, and complaints, you may contact the fp88 data protection team at:

Email: [email protected] (subject line: "DATA PROTECTION ENQUIRY")

Data We Collect

fp88 collects the following categories of personal data, depending on how you interact with the Platform. Not all categories will apply to every user — for example, marketing preference data is only collected from users who have opted into marketing communications.

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification document details (Bangladesh National Identity Card number, passport number, or driver's licence number) collected during account registration and KYC verification.
• Contact Data: Email address, Bangladesh mobile phone number (for bKash/Nagad/Rocket verification and 2FA), and residential address including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, or other).
• Financial Data: Mobile financial service account numbers (bKash, Nagad, Rocket/Dutch-Bangla Bank, Upay), bank account details where applicable, and payment card data (last four digits, expiry date — full card numbers are never stored by fp88 and are processed exclusively by our PCI-DSS compliant payment partners).
• Transaction Data: Full history of deposits (amounts in ৳, timestamps in BST/UTC+6, payment method used), withdrawal requests, bet placements and outcomes, casino game sessions, bonus claims, and wagering activity.
• Technical Data: Internet Protocol (IP) address, device identifiers, browser type and version, operating system, screen resolution, time zone, and login session data including access timestamps.
• Usage Data: Clickstream data, pages and game categories visited (cricket betting, BPL markets, slots, live casino, table tennis, ocean lord), session duration, search queries entered on the Platform, and feature interaction patterns.
• Communications Data: Records of communications between you and fp88 customer support, including live chat transcripts, email correspondence, and support ticket history.
• Responsible Gaming Data: Deposit limits, loss limits, session time limits, self-exclusion status, cooling-off period records, and any other responsible gaming tool activations made through your account dashboard.
• Verification Media: Document images (scans or photographs of identity documents) and selfie verification images submitted as part of the KYC verification process.

How We Collect Your Data

fp88 collects personal data through the following channels and mechanisms:

• Direct Collection: Data you provide directly when registering your fp88 account, completing the fp88 Login, submitting KYC documents, making a deposit or withdrawal request, contacting customer support, participating in a promotion, or completing any form on the Platform.
• Automated Technical Collection: Data collected automatically as you use the Platform, including IP addresses, device data, session logs, and clickstream data through server logs, cookies, web beacons, and similar tracking technologies (see Section 8 for full details on cookies).
• Payment Partners: Data received from our payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard payment networks) confirming the status and outcome of financial transactions, including transaction reference numbers and timestamps.
• KYC and Identity Verification Partners: Data received from third-party identity verification service providers following their cross-referencing of your submitted documents against official records and databases.
• Fraud Prevention Services: Risk scores, device fingerprint data, and fraud signal data received from third-party fraud prevention and detection providers with whom fp88 has a data sharing arrangement.
• Game Providers: Session data and game outcome records received from third-party game studios (Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, Spribe) in connection with casino game activity on the Platform.

How We Use Your Personal Data

fp88 uses the personal data it collects for the following specific purposes. We process personal data only for purposes that are compatible with the lawful basis under which the data was collected (see Section 6).

• Account Registration and Management: To create and maintain your fp88 account, verify your identity, enable the fp88 Login, manage your account settings, process your preference changes, and communicate account-related notices to you.
• Payment Processing: To process deposits (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and to fulfil withdrawal requests to your registered Bangladesh payment method, including the application of any required KYC checks prior to processing.
• Sports Betting and Casino Gaming Services: To receive and settle your bets on cricket (BPL, IPL, T20 World Cup, Bangladesh Tigers), football, kabaddi, hockey, and table tennis markets, and to enable your access to the fp88 Casino games lobby.
• Bonus and Promotion Administration: To credit eligible bonuses to your account, track wagering requirement progress, enforce promotional terms and conditions, and prevent bonus abuse.
• Customer Support: To respond to your support enquiries, investigate and resolve complaints and betting disputes, and improve the quality of our support service through review of interaction records.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, bot usage, and other security threats against the Platform and its users.
• Legal and Regulatory Compliance: To comply with anti-money laundering obligations, responsible gaming requirements, and any other applicable legal obligations, including responding to law enforcement requests where legally required.
• Responsible Gaming: To monitor betting and gaming patterns for indicators of problem gambling, to enforce the responsible gaming tool settings you have activated in your account, and to proactively reach out to players who may be exhibiting concerning behaviour patterns.
• Platform Improvement and Analytics: To analyse usage patterns across the Platform to improve product features, optimise user experience, and develop new betting markets and casino game offerings relevant to the Bangladesh market.
• Marketing Communications (with consent only): To send you personalised promotional offers, bonus alerts, BPL season betting promotions, Eid special offers, Pohela Boishakh free bet promotions, and other marketing materials where you have provided explicit consent to receive them.

Lawful Basis for Processing

fp88 relies on the following lawful bases for processing your personal data, as appropriate for each specific processing activity:

• Performance of a Contract: Processing that is necessary to fulfil the agreement between you and fp88 — including account registration, payment processing, bet settlement, KYC verification, and account management — is processed on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable legal obligations — including anti-money laundering identity checks, transaction record retention, responsible gaming reporting, and responses to lawful regulatory or law enforcement requests — is processed on the basis of legal obligation.
• Legitimate Interests: Processing carried out in pursuit of fp88's legitimate business interests — including fraud prevention, security monitoring, platform analytics, and basic operational communications — where those interests are not overridden by your rights and interests. fp88 has conducted legitimate interest assessments (LIAs) for each processing activity relying on this basis.
• Consent: Processing for which fp88 has obtained your freely given, specific, informed, and unambiguous consent — including marketing communications, optional personalisation features, and any other processing activity not covered by the bases above. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Vital Interests: In exceptional circumstances — specifically in connection with responsible gaming interventions where we have a genuine concern for a player's welfare — fp88 may process certain data on the basis of vital interests.

Data Sharing & Third Parties

fp88 does not sell, rent, or trade your personal data to any third party for their own independent commercial purposes. Personal data is shared with third parties only to the extent strictly necessary for the operation of the fp88 platform and the delivery of services to you, as described below:

• Payment Processors: bKash, Nagad, Dutch-Bangla Bank (Rocket), Upay (UCB), Visa, and Mastercard payment networks — for the sole purpose of processing your deposits and withdrawals. These parties act as independent data controllers in respect of your payment data and their own privacy policies govern that processing.
• KYC and Identity Verification Providers: Specialist third-party providers engaged to verify your identity documents and confirm your age (21+) and identity as part of the fp88 registration and withdrawal verification process. These providers act as data processors under contract with fp88.
• Game Studios and Software Providers: Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, Spribe, and other certified game providers — who receive limited session and account data necessary to authenticate your access to their games and to record game outcomes for settlement and auditing purposes.
• Fraud Prevention and Cybersecurity Partners: Third-party providers of fraud detection, device fingerprinting, IP reputation, and cybersecurity services who assist fp88 in protecting the platform and its users from fraudulent activity and security threats.
• Customer Support Technology Providers: Providers of live chat, email ticketing, and CRM platforms used to deliver fp88's 24/7 English-language customer support service. These providers act as data processors and have no independent right to use your data.
• Legal and Regulatory Authorities: Law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where fp88 is under a legal obligation to disclose personal data or where disclosure is necessary to protect the legal rights of fp88 or to prevent or detect crime.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of all or part of fp88's business assets, your personal data may be transferred to the acquiring entity as part of the transaction. fp88 will notify you of any such transfer and the privacy policies of the acquiring entity prior to your data being transferred.

Cookies & Tracking Technologies

fp88 uses cookies and similar tracking technologies (web beacons, pixel tags, local storage objects) on the Platform to deliver core functionality, enhance user experience, and support analytics and security operations. By continuing to use the fp88 Platform after being presented with a cookie notice, you consent to the use of cookies in accordance with this Policy.

fp88 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your fp88 Login session, remember your authentication state, protect against cross-site request forgery (CSRF) attacks, and enable the core betting and gaming features of the Platform. These cookies cannot be disabled without breaking core Platform functionality.
• Performance and Analytics Cookies: These cookies collect aggregated, anonymised data about how users navigate the Platform — which pages are most visited, how long sessions last, which betting markets are most popular, and where users encounter errors. fp88 uses this data to improve Platform performance and user experience.
• Functionality Cookies: These cookies remember your preferences — such as your preferred deposit method, your default sports market, and your responsible gaming settings — so you do not need to re-enter them on every visit after fp88 Login.
• Security Cookies: These cookies support fp88's fraud detection and account security systems by recording device fingerprint data, session anomaly indicators, and IP reputation signals that help identify suspicious account activity.

fp88 does not use third-party advertising cookies or permit third-party advertising networks to place tracking cookies on the Platform for the purpose of behavioural advertising to fp88 users on other websites.

Data Retention

fp88 retains personal data only for as long as is necessary for the specific purpose for which it was collected, taking into account applicable legal retention obligations. The following retention periods apply to the main categories of personal data held by fp88:

• Account and Identity Data: Retained for the duration of your active fp88 account plus a minimum of five years following account closure. This extended retention period reflects anti-money laundering (AML) regulatory requirements that mandate the retention of customer due diligence records.
• Transaction and Betting Records: Retained for a minimum of five years from the date of each transaction, in compliance with financial record-keeping requirements and to support the resolution of any disputes or regulatory enquiries that may arise within that period.
• KYC Verification Documents: Retained for the duration of the account relationship plus five years. Document images are stored in encrypted form with access restricted to authorised compliance personnel only.
• Customer Support Communications: Retained for three years from the date of each interaction, to support quality assurance, dispute resolution, and the continuous improvement of fp88's customer support service.
• Marketing Preference Data: Retained for the duration of your opt-in consent, plus one year following withdrawal of consent to evidence the history of your marketing preferences in the event of any complaint.
• Technical and Usage Data (Logs): Typically retained for 12 months for operational purposes, after which aggregated, anonymised analytical datasets derived from this data may be retained indefinitely for platform improvement purposes.
• Responsible Gaming Records: Retained for the full account lifetime plus five years, given the regulatory importance of maintaining accurate records of self-exclusion agreements, deposit limits, and other player protection measures.

Data Security

fp88 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes the following controls:

• Encryption in Transit: All data transmitted between your device and the fp88 Platform is protected by 256-bit TLS/SSL encryption. Our servers are configured to reject connections using deprecated protocol versions (SSL 3.0, TLS 1.0, TLS 1.1) that are known to be vulnerable to interception attacks.
• Encryption at Rest: Sensitive personal data stored on fp88 servers — including identity documents, payment account numbers, and KYC records — is encrypted at rest using AES-256 encryption. Encryption keys are managed through a dedicated key management system with strict access controls.
• Access Controls: Access to personal data within fp88's internal systems is governed by a role-based access control (RBAC) framework. Staff members are granted access only to the data necessary for their specific job function. All access to personal data is logged and subject to periodic access review.
• Two-Factor Authentication: fp88 offers two-factor authentication (2FA) for all player accounts and requires it for all internal staff accounts with access to personal data or financial systems. Players are strongly encouraged to enable 2FA through their account security settings.
• Penetration Testing and Vulnerability Management: fp88 conducts regular penetration testing of its Platform infrastructure and maintains a vulnerability management programme to identify, prioritise, and remediate security weaknesses on an ongoing basis.
• Data Breach Response: fp88 maintains a documented incident response plan for personal data breaches. In the event of a breach that poses a risk to your rights and freedoms, fp88 will notify affected users within 72 hours of becoming aware of the breach, in accordance with applicable data protection obligations.
• Staff Training: All fp88 staff who handle personal data receive regular data protection and security awareness training. Access to personal data systems is contingent on completion of mandatory training modules.

Your Data Rights

As a user of the fp88 Platform, you have the following rights in respect of your personal data. fp88 is committed to honouring these rights promptly and without unnecessary obstruction. All requests should be submitted to [email protected] with the subject line "DATA RIGHTS REQUEST" and will be acknowledged within 5 business days and fulfilled within 30 calendar days of identity verification.

• Right of Access: You have the right to request a copy of all personal data fp88 holds about you, together with information about how it is processed, the lawful basis for each processing activity, the categories of recipients with whom it has been shared, and the applicable retention period.
• Right to Rectification: You have the right to request the correction of any inaccurate or incomplete personal data fp88 holds about you. You may also update certain personal data directly through your account settings dashboard without needing to submit a formal request.
• Right to Erasure ("Right to Be Forgotten"): You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other lawful basis applies), or where the data has been unlawfully processed. This right is subject to fp88's legal data retention obligations — we cannot delete data we are legally required to retain.
• Right to Restriction of Processing: You have the right to request that fp88 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of your data is being contested, or while an objection to processing is being assessed.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to fp88 in a structured, commonly used, machine-readable format (such as JSON or CSV), and to request that fp88 transmit that data directly to another service provider where technically feasible.
• Right to Object: You have the right to object at any time to the processing of your personal data where fp88 relies on legitimate interests as its lawful basis. fp88 will cease processing unless it can demonstrate compelling legitimate grounds that override your rights, or where the processing is necessary for legal claims.
• Right to Withdraw Consent: Where fp88 relies on your consent as the lawful basis for processing (primarily marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.
• Right Not to Be Subject to Automated Decision-Making: fp88 uses automated systems to assist with fraud detection and responsible gaming monitoring. Where these automated processes produce decisions that significantly affect you — such as account suspension or self-exclusion enforcement — you have the right to request human review of that decision by contacting [email protected].

Marketing Communications

fp88 sends marketing communications — including promotional bonus offers, deposit match alerts, BPL season betting promotions, Eid special free bet campaigns, Pohela Boishakh celebration offers, IPL match day promotions, and new game launch announcements — only to users who have explicitly opted in to receive such communications during registration or subsequently through their account settings dashboard.

Marketing communications from fp88 may be delivered via the following channels, subject to your individual opt-in preferences:

• Email to your registered email address
• SMS to your registered Bangladesh mobile number
• In-Platform notifications visible after fp88 Login
• Push notifications (where you have enabled them on your device)

Each marketing communication from fp88 will include a clear and simple mechanism to unsubscribe from that channel. You may also manage all marketing preferences at any time through the "Notifications" section of your fp88 account dashboard, or by contacting [email protected] with the subject line "UNSUBSCRIBE".

Children & Minors

The fp88 Platform is strictly intended for adults aged 21 years and above. fp88 does not knowingly collect, process, or retain any personal data from individuals under the age of 21. Age verification is a mandatory step in the fp88 account registration and KYC process, and accounts where the account holder is found to be under 21 years of age will be immediately suspended and any funds returned in accordance with our responsible gaming obligations.

fp88 actively employs age verification technology as part of its KYC process to prevent underage registration. Parents and guardians in Bangladesh who are concerned about underage access to online gambling platforms are encouraged to use parental control tools available for their internet service provider or device operating system to block access to gambling-related websites.

International Data Transfers

fp88 is a platform serving the Bangladesh market and our primary data processing infrastructure is configured to serve users in Bangladesh Standard Time (BST, UTC+6). However, due to the global nature of certain third-party service providers — including game studios (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi), fraud prevention providers, and cloud infrastructure partners — your personal data may be transferred to and processed in jurisdictions outside Bangladesh.

Where personal data is transferred outside Bangladesh, fp88 ensures that appropriate safeguards are in place to protect the data, including:

• Contractual clauses in agreements with data processors that impose data protection standards equivalent to those applied by fp88 within Bangladesh.
• Transfers only to processors and sub-processors operating in jurisdictions that maintain adequate data protection legal frameworks or that have agreed to equivalent contractual protections.
• Regular review of international transfer arrangements to ensure continued adequacy of protection as circumstances change.

By using the fp88 Platform and agreeing to this Privacy Policy, you acknowledge and consent to the transfer of your personal data to third-party processors in other jurisdictions, subject to the safeguards described in this section.

Updates to This Privacy Policy

fp88 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, changes to the services offered on the Platform, or for any other legitimate operational reason. The most current version of the Privacy Policy is always available at https://fp88.bar/privacy-policy.

Where a proposed update to this Privacy Policy materially affects your rights or the way fp88 processes your personal data, fp88 will notify you in advance of the change taking effect through one or more of the following channels:

• A prominent notice displayed on the fp88 Platform upon your next fp88 Login session
• An email notification to your registered email address
• An in-Platform notification through your account dashboard

Non-material updates — such as corrections of typographical errors, clarifications of existing practices that do not alter your rights, or formatting changes — may be made without advance notice. In all cases, the "Last Updated" date at the top of this Policy will be revised to reflect the date of the most recent change.

Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or fp88's handling of your personal data, please contact our data protection team using the details below. We are committed to resolving all privacy-related enquiries promptly, transparently, and in good faith.

Email: [email protected] (subject line: "DATA PROTECTION ENQUIRY" or "DATA RIGHTS REQUEST")

Our data protection team operates 24 hours a day, 7 days a week, including Bangladesh public holidays. Our target first-response time for privacy-related email enquiries is under 8 hours during Bangladesh Standard Time (UTC+6) business hours. All data rights requests will be formally acknowledged within 5 business days and fulfilled within 30 calendar days of successful identity verification.

fp88 takes all privacy complaints seriously. We maintain a formal complaint register and review all complaints at a senior level to identify systemic issues and improve our data protection practices on an ongoing basis. We will never penalise, restrict, or disadvantage a user's account as a result of that user raising a legitimate privacy complaint or exercising their data rights.