887fb Privacy Policy — Your Data, Your Rights

1 Introduction

887fb ("we", "us", "our") operates the online betting and casino platform accessible at https://887fb.io (the "Platform"). We are committed to protecting the privacy and personal data of every player who registers, visits, or interacts with our Platform. This Privacy Policy describes in full detail the categories of personal data we collect, the purposes for which we use that data, the legal bases on which we process it, the parties with whom it may be shared, the period for which it is retained, and the rights you hold over it.

This Privacy Policy applies to all users of the Platform, including registered players and unregistered visitors. By accessing or using the Platform, you acknowledge that you have read this Privacy Policy and agree to the processing of your personal data as described herein. If you do not agree, please discontinue use of the Platform immediately.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference.

2 Data We Collect

887fb collects personal data through several channels: directly from you during registration and verification, automatically as you use the Platform, and from trusted third-party payment and fraud-prevention partners. The categories of data we collect are set out below.

2.1 Registration & Account Data

• Full legal name
• Date of birth (required to verify the 21+ age requirement)
• Email address
• Mobile phone number (used for SMS verification and account security)
• Residential address (city, district, and division within Bangladesh or other jurisdiction)
• Username and encrypted password

2.2 Identity Verification (KYC) Data

• Copy of government-issued photo ID (National ID card, passport, or driving licence)
• Proof of address document (utility bill, bank statement, or government correspondence)
• Selfie photograph for liveness verification where required
• Proof of payment method (e.g., screenshot of bKash or Nagad account in your name)

2.3 Financial Transaction Data

• Deposit amounts, dates, and payment method references
• Withdrawal amounts, dates, and destination account references
• Transaction IDs assigned by payment processors (bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard)
• Account balance and wagering history for responsible gaming monitoring

2.4 Technical & Usage Data (collected automatically)

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Session start and end times, pages visited, and features used
• Referral URL (if you arrived via a link from another page)
• Crash reports and error logs for platform stability purposes

2.5 Communications Data

• Records of live chat, email, and support ticket conversations
• Complaint and dispute records
• Responses to player surveys or feedback forms (where voluntarily completed)

3 How We Use Your Data

887fb uses the personal data we collect only for the specific, legitimate purposes described below. We do not use your data for purposes that are incompatible with those for which it was originally collected.

If you have opted in to receive promotional communications from 887fb, we may contact you by email or SMS about new games, seasonal offers (e.g., BPL tournament promotions, Eid bonus offers, Pohela Boishakh specials), and platform updates. You may withdraw your consent to marketing communications at any time by contacting support or using the unsubscribe option in any marketing email.

4 Legal Basis for Processing

Every processing activity carried out by 887fb rests on one or more of the following legal bases:

• Contractual necessity: Processing is required to perform the contract between 887fb and you (i.e., providing the betting and casino services you signed up for). This covers account management, deposit and withdrawal processing, and customer support.
• Legal obligation: Processing is required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, KYC verification obligations, and record-keeping mandates.
• Legitimate interests: Processing is carried out in pursuit of 887fb's legitimate business interests, including fraud detection and prevention, platform security, responsible gaming monitoring, and improving our services. We ensure that our legitimate interests do not override your fundamental rights and freedoms.
• Consent: Where we rely on consent — primarily for promotional communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

5 Data Sharing & Disclosure

887fb does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We may share your data only in the following limited and controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the transaction data necessary to process your deposit or withdrawal. These providers act as independent data controllers for payments under their own privacy policies.
• Game content providers: Pragmatic Play, PG Soft, JILI, Evolution Gaming, Spribe, Habanero, Ezugi, and Microgaming receive a session token and player identifier to deliver game content. These providers do not receive your full identity data.
• Identity verification services: Third-party KYC and AML screening providers may receive copies of your identity documents solely for the purpose of conducting legally required verification checks.
• Fraud prevention networks: Anonymised or hashed device and behavioural signals may be shared with fraud-prevention services to protect the platform and its players from abuse.
• Legal and regulatory authorities: 887fb will disclose personal data to law enforcement, financial intelligence units, or other competent authorities when required by law, court order, or where disclosure is necessary to prevent serious harm.
• Corporate transactions: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity, subject to the same level of data protection commitments described in this policy.

6 Payment Data

All payment transactions on the 887fb Platform are processed through PCI-DSS compliant payment gateways. 887fb does not store full card numbers or mobile banking PINs on our servers. Payment method details are tokenised by the relevant payment processor (e.g., bKash, Nagad, Visa) and only a reference token is retained by 887fb for the purpose of matching deposit and withdrawal records.

All deposits and withdrawals must be made using a payment method registered in your own name. This requirement is both a fraud-prevention measure and an anti-money-laundering control. Third-party payment attempts will be reversed and the associated account flagged for review.

7 Cookies & Tracking Technologies

887fb uses a small number of cookies and similar tracking technologies to operate the Platform effectively. We do not use advertising cookies or cross-site tracking technologies.

• Essential / Functional Cookies: These cookies are required for the Platform to function. They maintain your session state, remember your language preference, and keep you logged in securely during a session. Disabling these cookies will prevent the Platform from working correctly.
• Analytical Cookies: These cookies collect anonymised data about how visitors use the Platform — which pages are visited most frequently, how long sessions last, and where errors occur. This data is used solely to improve platform performance and user experience. No personally identifiable information is retained in analytical cookies.
• Security Cookies: These cookies help detect and prevent fraudulent login attempts, bot activity, and CSRF attacks. They are a necessary component of our platform security infrastructure.

You can control cookie settings through your browser. Please note that disabling essential cookies may affect your ability to use certain features of the Platform, including logging in and placing bets. 887fb does not use pixel tags, web beacons, or third-party advertising networks.

8 Data Retention

887fb retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply as general guidelines:

• Active account data: Retained for the duration of your account registration plus a period of 5 years after account closure, to comply with AML record-keeping obligations.
• KYC and identity verification documents: Retained for a minimum of 5 years from the date of verification, or longer if required by applicable law.
• Financial transaction records: Retained for 5 years from the date of the transaction.
• Customer support communications: Retained for 2 years from the date of the last communication, or for the duration of any unresolved dispute.
• Technical and usage logs: Retained for 12 months in detailed form, then aggregated or anonymised for statistical analysis.
• Marketing consent records: Retained for the duration of your consent plus 1 year following withdrawal of consent, as evidence of the consent given.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data cannot be immediately deleted due to technical constraints, it is restricted from active use until deletion is completed.

9 Data Security

887fb implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our technical and organisational security measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and our servers
• AES-256 encryption at rest for all sensitive personal data stored in our databases
• Role-based access controls (RBAC) ensuring that only authorised personnel can access specific categories of data
• Multi-factor authentication (MFA) required for all internal 887fb staff accessing production systems
• Intrusion detection and prevention systems (IDS/IPS) monitoring for anomalous network activity
• Regular security audits and penetration testing conducted by independent security firms
• Incident response procedures in place to contain, investigate, and remediate any data security incident

In the event of a data breach that is likely to result in a high risk to your rights and freedoms, 887fb will notify affected players without undue delay, providing details of the nature of the breach, the categories of data affected, the likely consequences, and the measures taken to address it.

10 Your Rights

Subject to applicable law, you hold the following rights in respect of your personal data held by 887fb. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and complete it within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data we hold about you and information about how it is used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data. For certain changes (e.g., legal name change), supporting documentation will be required.
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations (e.g., AML record-keeping requirements).
• Right to Restriction of Processing: You have the right to request that we restrict processing of your data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format where the processing is based on consent or contractual necessity.
• Right to Object: You have the right to object to processing of your personal data where it is based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing that occurred before the withdrawal.

11 Children & Minors

887fb strictly enforces a minimum age requirement of 21 years for all registered players. The Platform is not directed at, and is not intended for use by, individuals under the age of 21. We do not knowingly collect personal data from anyone under 21 years of age.

If we discover or are informed that a player is under the age of 21, we will immediately close the account, void all associated bets and transactions, and securely delete all personal data collected from that individual, except where retention is required to comply with legal obligations or to prevent future underage registration attempts.

If you believe a minor has registered an account on the 887fb Platform, please contact our support team immediately at [email protected]. We take underage gambling extremely seriously and act on all such reports without delay.

12 International Data Transfers

887fb's primary player base is located in Bangladesh. Where personal data is transferred to or processed in jurisdictions outside Bangladesh — for example, when using internationally hosted game content from providers such as Evolution Gaming or Pragmatic Play — such transfers are carried out only where appropriate safeguards are in place.

These safeguards may include contractual clauses that require the recipient to protect your personal data to standards equivalent to those applied by 887fb, or where the recipient jurisdiction is recognised as providing an adequate level of data protection. We do not transfer personal data to jurisdictions that lack adequate protection without first putting binding contractual protections in place.

13 Changes to This Privacy Policy

887fb reserves the right to update or revise this Privacy Policy at any time. When material changes are made, we will notify registered players via the email address associated with their account and/or by displaying a prominent notice on the Platform. The "Last Updated" date at the top of this document will always reflect the date of the most recent revision.

Your continued use of the Platform after notification of a material change constitutes your acceptance of the revised Privacy Policy. If you do not agree with the revised policy, you should cease using the Platform and, if you have a positive balance, contact our support team to arrange a withdrawal before closing your account.

We encourage you to review this Privacy Policy periodically so that you remain informed about how 887fb protects your data. Previous versions of this Privacy Policy are available on request by contacting [email protected].

14 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way 887fb handles your personal data, please contact us through any of the following channels:

• Email: [email protected] — please use the subject line "Privacy Enquiry" for data-related requests
• Live Chat: Available directly on the Platform, 24 hours a day, 7 days a week, in both English and Bengali

We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 5 business days. Complex data rights requests may take up to 30 calendar days to fulfil, in which case we will keep you informed of progress.