ff88 Privacy Policy

This Privacy Policy ("Policy") sets out how ff88 ("ff88", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "your", "Player") who access or use the ff88 online gaming platform at ff88.pro. This Policy applies to all Pakistani players and any other users who interact with ff88's website, mobile interface, customer support channels, or promotional communications.

By registering an account with ff88 and using our services — including cricket betting, live casino tables, slot games, and PKR transactions via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, or any other supported payment method — you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

ff88 is the operator of the online gaming platform accessible at ff88.pro, offering sports betting (including PSL cricket markets), live dealer casino games, Dragon Tiger, slot machines, and other real-money gaming products to eligible players. ff88 operates under an international gaming licence and is committed to maintaining the highest standards of responsible gaming, player data protection, and financial security.

For the purposes of this Privacy Policy, ff88 acts as the data controller in respect of the personal data it collects directly from players during registration, account use, and customer support interactions. Where ff88 engages third-party service providers to process personal data on its behalf — for example, payment processors, identity verification services, or fraud prevention platforms — those parties act as data processors and are bound by data processing agreements that restrict their use of your data to the specific services they provide to ff88.

If you have any questions about how ff88 handles your personal data, or if you wish to exercise any of your data rights, please contact the ff88 data team using the contact details provided in Section 12 of this Policy.

ff88 collects personal data through several channels, including your account registration form, KYC verification submissions, payment transactions, customer support communications, and your ongoing use of the platform. The categories of personal data we collect are as follows:

ff88 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information, except where a player voluntarily discloses health-related information in the context of responsible gaming self-exclusion requests or problem gambling support interactions, in which case such data is processed solely for the purpose of providing appropriate support and will not be used for any other purpose.

ff88 uses the personal data it collects for the following specific and lawful purposes:

• Account management. To create and maintain your ff88 player account, including processing your registration, verifying your identity through CNIC and payment method checks, and managing your login credentials and account settings.
• Service delivery. To provide you with access to ff88's gaming products, including cricket betting, live dealer tables, slot games, and Dragon Tiger, and to process your PKR deposits and withdrawals via JazzCash, EasyPaisa, Raast, and other supported Pakistani payment methods.
• Responsible gaming monitoring. To monitor your gaming patterns for indicators of problem gambling behaviour and to administer the responsible gaming tools you have activated on your account, including deposit limits, cooling-off periods, and self-exclusion requests.
• Fraud prevention and security. To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other forms of prohibited conduct as defined in the ff88 Terms and Conditions.
• Regulatory compliance. To fulfil ff88's obligations under its international gaming licence, including maintaining gaming transaction records, cooperating with regulatory audits, and responding to lawful requests from law enforcement authorities.
• Customer support. To respond to your enquiries, resolve account disputes, process complaints, and communicate important account information including policy updates, security alerts, and withdrawal notifications.
• Platform improvement. To analyse aggregated, anonymised usage data to improve the functionality, performance, and user experience of the ff88 platform, including identifying popular games, optimising payment flows, and improving mobile responsiveness.
• Marketing communications (where consented). To send you promotional offers, bonus notifications, and platform updates via email or SMS, but only where you have expressly opted in to receive such communications. You may withdraw your marketing consent at any time by contacting ff88 support.

ff88 processes your personal data on the following legal grounds, depending on the specific purpose for which the data is being processed:

• Contractual necessity. The majority of ff88's data processing activities — including account management, payment processing, KYC verification, and service delivery — are necessary for the performance of the contract between you and ff88 (i.e., the ff88 Terms and Conditions you accepted upon registration). Without this processing, ff88 cannot provide you with its services.
• Legal obligation. Certain processing activities, including anti-money laundering checks, gaming transaction record-keeping, and cooperation with regulatory and law enforcement authorities, are required by law and by the conditions of ff88's gaming licence. This processing is mandatory and cannot be opted out of.
• Legitimate interests. ff88 processes certain data — including technical data, gaming activity analytics, and fraud detection signals — on the basis of its legitimate interests in operating a safe, fair, and commercially viable gaming platform. These interests are carefully balanced against players' privacy rights, and ff88 does not rely on legitimate interests where those interests are overridden by your fundamental rights.
• Consent. Where ff88 seeks to use your personal data for purposes beyond those described above — such as sending you direct marketing communications — it will first obtain your express consent. You have the right to withdraw consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

ff88 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share your personal data only in the following limited and controlled circumstances:

• Payment service providers. To process your PKR deposits and withdrawals, ff88 shares necessary financial and identity data with our payment partners, including JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, and Meezan Bank. These providers receive only the data required to complete the specific transaction and are bound by their own regulatory privacy obligations.
• Identity verification and KYC providers. ff88 may engage specialist third-party identity verification services to assist with CNIC validation, age verification, and document authentication. These providers process your identity data solely for the purpose of KYC compliance on ff88's behalf.
• Fraud prevention and security services. ff88 shares technical and behavioural data with anti-fraud and cybersecurity partners to detect suspicious activity, prevent unauthorised account access, and protect the integrity of the platform.
• Regulatory authorities and law enforcement. ff88 will disclose personal data to gaming regulators, financial intelligence units, or law enforcement agencies where required to do so by law, court order, or the conditions of its gaming licence. Such disclosures are made only to the extent required and in accordance with applicable legal procedures.
• Professional advisers. ff88 may share personal data with legal advisers, auditors, and compliance consultants where necessary for the conduct of legal proceedings, regulatory audits, or corporate transactions, subject to strict confidentiality obligations.

ff88 uses cookies and similar tracking technologies on its platform to enhance functionality, maintain session security, and gather anonymised analytics data. The following categories of cookies are in use:

• Essential cookies. These cookies are strictly necessary for the ff88 platform to function. They maintain your login session, remember your language and currency preferences, and enable secure communication between your browser and ff88's servers. These cookies cannot be disabled without impairing platform functionality.
• Analytics cookies. ff88 uses first-party analytics tools to collect anonymised data about how players navigate the platform, which games they access most frequently, and where technical errors occur. This data is used exclusively to improve platform performance and is never linked to your individual player profile.
• Security cookies. These cookies help ff88 detect and prevent fraudulent login attempts, credential stuffing attacks, and other automated threats. They analyse device fingerprint signals and session behaviour patterns to flag anomalous activity for review.
• Preference cookies. These cookies remember your display preferences, notification settings, and responsible gaming tool configurations so that they are applied consistently across sessions.

You may manage your cookie preferences through your browser settings. Disabling essential cookies may prevent you from logging into your ff88 account or using certain platform features. ff88 does not use third-party advertising cookies or behavioural tracking pixels that serve targeted advertisements based on your browsing history outside the ff88 platform.

ff88 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any applicable legal, regulatory, or contractual requirements that mandate longer retention periods. The following retention guidelines apply:

• Active account data. Personal data associated with an active ff88 account is retained for the duration of the account's active status plus a period of five years following permanent account closure, in accordance with anti-money laundering record-keeping requirements under ff88's gaming licence.
• Gaming transaction records. Records of all bets, deposits, withdrawals, and bonus transactions are retained for a minimum of five years from the date of the transaction for regulatory audit and dispute resolution purposes.
• KYC documentation. Identity documents submitted for CNIC verification and payment method ownership confirmation are retained for five years following account closure. Documents found to be fraudulent may be retained longer in connection with any resulting legal proceedings.
• Customer support records. Communication records, including chat transcripts and email correspondence, are retained for three years from the date of the interaction to enable effective complaint handling and quality assurance.
• Marketing consent records. Records of your marketing consent or opt-out are retained indefinitely to demonstrate compliance with your stated communication preferences.

When personal data is no longer required, ff88 securely deletes or anonymises it in accordance with our internal data disposal procedures. Anonymised, aggregated data derived from player activity may be retained indefinitely for statistical analysis and platform improvement purposes, as it can no longer be used to identify any individual.

As a registered ff88 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact the ff88 data team using the contact details in Section 12. We will respond to all valid requests within 30 days of receipt.

• Right of access. You have the right to request a copy of the personal data ff88 holds about you, along with information about how it is being processed. This is commonly referred to as a Subject Access Request (SAR).
• Right to rectification. If any personal data ff88 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain account details directly through your ff88 account settings.
• Right to erasure. In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to exceptions where processing is required for legal compliance, fraud prevention, or the establishment and defence of legal claims. ff88 will notify you if a deletion request cannot be fully fulfilled due to such exceptions.
• Right to restrict processing. You have the right to request that ff88 temporarily suspends the processing of your personal data while a rectification or erasure request is being assessed, or where you contest the accuracy of the data in question.
• Right to data portability. Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent. Where ff88 is processing your personal data on the basis of your consent — such as for marketing communications — you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to withdrawal.
• Right to object to direct marketing. You have an absolute right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of such an objection, ff88 will immediately cease all marketing communications to you.

ff88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• TLS 1.3 encryption for all data transmitted between your browser or mobile device and the ff88 servers.
• AES-256 encryption for personal data and financial records stored in ff88's databases.
• Multi-factor authentication (MFA) requirements for ff88 staff accessing internal systems that contain player personal data.
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access specific categories of player data.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Continuous monitoring of ff88's infrastructure for anomalous access patterns, intrusion attempts, and data exfiltration signals.
• An internal data breach response protocol with defined escalation procedures and player notification timelines.

While ff88 takes all reasonable precautions to protect your personal data, no online platform can guarantee absolute security. You are also responsible for maintaining the security of your own account by keeping your login credentials confidential and enabling any available two-factor authentication features on your ff88 account.

The ff88 platform is strictly for individuals aged 21 and above. ff88 does not knowingly collect, process, or retain personal data from individuals under the age of 21. Any account found to have been registered by or used by an individual under 21 will be immediately and permanently closed, and any personal data associated with that account will be deleted or anonymised in accordance with our data retention procedures, except where legal obligations require its retention for a defined period.

ff88 does not direct any marketing communications, promotional content, or platform features at individuals under the age of 21, and employs age verification measures as part of its KYC process to prevent underage access to real-money gaming services.

ff88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform functionality, or data processing practices. When we make material changes to this Policy, we will notify registered players via their registered email address or mobile number with reasonable advance notice where practicable.

The "Effective Date" displayed at the top of this Policy will be updated to reflect the date on which the most recent revision took effect. We encourage you to review this page periodically to stay informed of how ff88 is protecting your personal data. Your continued use of the ff88 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

If you do not agree with any changes to this Privacy Policy, you should cease using the ff88 platform and contact our support team to request account closure. Any personal data associated with your account will be handled in accordance with the version of the Privacy Policy that was in effect at the time of collection, subject to any overriding legal requirements.

If you have any questions, concerns, or requests regarding this Privacy Policy or the personal data ff88 holds about you, please do not hesitate to contact our data protection team. We are available 24 hours a day, 7 days a week and aim to respond to all privacy-related enquiries within 5 business days.

Data enquiries email: [email protected]

Please include your registered ff88 account username and a brief description of your request or concern to help us respond promptly. For Subject Access Requests, please also provide a copy of a valid identity document to enable us to verify your identity before disclosing any personal data.